logo

Nebula – Autonomous AI Pentesting Tool

ID: a60b80d4-4eee-5d4b-ac7d-8806cef40abd

STIX ID: report--a60b80d4-4eee-5d4b-ac7d-8806cef40abd

Feed Name: Darknet

Threat Score
75/100

Date Published: 2025-04-18

Date Updated: 2026-05-11

...
...

DumpBrowserSecrets is a post‑exploitation credential-harvesting tool that extracts saved passwords, session cookies, OAuth refresh tokens, credit card data and browsing history from major Chromium-based browsers and Firefox by bypassing App‑Bound Encryption (using a headless Chromium + DLL injection with the IElevator COM interface) and DPAPI/NSS protections; it includes evasion features (string obfuscation, API hashing, PPID/argument spoofing, handle duplication) and writes structured JSON output for red-team use, with accompanying detection and mitigation recommendations.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.