Hacking Tools, Hacker News & Cyber Security
ID: 9b1a1459-a053-536d-a25c-ea27148c0f32
STIX ID: report--9b1a1459-a053-536d-a25c-ea27148c0f32
Feed Name: Darknet
DumpBrowserSecrets is a Windows post-exploitation tool that extracts saved passwords, session cookies, OAuth refresh tokens, credit card data, autofill entries, and browsing history from Chromium-based browsers (Chrome, Edge, Brave, Opera variants, Vivaldi) and Firefox; it implements an App-Bound Encryption bypass for Chromium by spawning a headless browser and injecting a DLL (Early Bird APC) to use the IElevator COM interface, includes DPAPI/NSS handling, evasion features, and outputs structured JSON for red-team or adversary use, with detection and mitigation guidance provided.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.
