logo

How Does It Fit Into A World Of Continuous Delivery

ID: a3149804-f033-5587-8b0d-207cc7eb4bb4

STIX ID: report--a3149804-f033-5587-8b0d-207cc7eb4bb4

Feed Name: Darknet

Threat Score
75/100

Date Published: 2015-06-10

Date Updated: 2026-05-08

...
...

DumpBrowserSecrets is a red-team oriented post-exploitation tool that extracts saved credentials, session cookies, OAuth refresh tokens, credit cards, autofill data, and browsing history from major Windows browsers (Chrome, Edge, Brave, Opera, Opera GX, Vivaldi, and Firefox). It implements a Chromium App‑Bound Encryption bypass by spawning a headless Chromium process and injecting a DLL to use the IElevator COM interface to decrypt keys, supports DPAPI and NSS decryption for other browsers, includes operational evasion techniques (string obfuscation, API hashing, PPID/argument spoofing, handle duplication), outputs structured JSON, and is intended for testing credential exposure and EDR detection capabilities.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.