Hacking Tools, Hacker News & Cyber Security
ID: 9ba9cef9-d3a3-58da-8e2f-7e6a745ae85d
STIX ID: report--9ba9cef9-d3a3-58da-8e2f-7e6a745ae85d
Feed Name: Darknet
DumpBrowserSecrets is a precompiled Windows post‑exploitation tool that rapidly extracts browser-stored secrets (cookies, saved credentials, OAuth refresh tokens, credit cards, autofill, history, bookmarks) from Chrome/Edge/Brave (via an App‑Bound Encryption bypass using a headless Chromium process + DLL injection), Opera-family browsers (DPAPI), and Firefox (NSS). The report documents the tool's architecture, evasion features (string obfuscation, API hashing, PPID/argument spoofing, Early Bird APC injection), output format, example attack usage, detection opportunities, and mitigation recommendations for red teams and defenders.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.
