logo

Hacking Tools, Hacker News & Cyber Security

ID: a06ddbd4-736e-50b5-b6b5-bc92d486e56c

STIX ID: report--a06ddbd4-736e-50b5-b6b5-bc92d486e56c

Feed Name: Darknet

Threat Score
75/100

Date Published: 2006-06-26

Date Updated: 2026-05-13

...
...

DumpBrowserSecrets is a precompiled Windows post‑exploitation tool that harvests browser‑stored secrets (saved logins, session cookies, OAuth refresh tokens, credit cards, autofill data, history, and bookmarks) from Chrome/Edge/Brave via an App‑Bound Encryption bypass using a headless Chromium process and IElevator COM interaction, from Opera/Opera GX/Vivaldi via DPAPI key extraction, and from Firefox via NSS decryption. The tool uses DLL injection (Early Bird APC), handle duplication, API hashing, string obfuscation, and process/argument spoofing to evade detection, outputs structured JSON, and is framed for red‑team assumed‑breach testing while enabling rapid account takeover and lateral movement if abused.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.