Anonymous Twitter Alternative Created For Protesters & Revolutionaries
ID: 99ce82b0-6578-5d4e-bbb4-19702e655523
STIX ID: report--99ce82b0-6578-5d4e-bbb4-19702e655523
Feed Name: Darknet
DumpBrowserSecrets is a publicly available post‑exploitation tool that harvests browser-stored secrets (saved logins, session cookies, OAuth refresh tokens, credit cards, autofill data, and history) from major Chromium-based and Firefox browsers on Windows. It bypasses Chrome's App‑Bound Encryption by spawning a headless Chromium process and injecting a DLL to use the IElevator COM interface to decrypt app_bound_encrypted_key, retrieves DPAPI or NSS-protected secrets for other browsers, includes multiple evasion techniques, and outputs structured JSON for red-team or offensive use — posing a high-risk credential and session takeover vector for enterprises.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.
