Damn Interested Hacking, Paid Server Indian Web, Love Hashing & More
ID: a95caf54-c698-54b4-bd07-0a84090e82fd
STIX ID: report--a95caf54-c698-54b4-bd07-0a84090e82fd
Feed Name: Darknet
DumpBrowserSecrets is a post‑exploitation browser credential extraction tool that harvests saved passwords, session cookies, OAuth refresh tokens, credit card details, autofill data and browsing history from major Chromium-based browsers (Chrome, Edge, Brave, Opera variants, Vivaldi) and Firefox. It bypasses Chrome's App‑Bound Encryption by spawning a headless Chromium process and injecting a DLL to use the IElevator COM interface to decrypt keys, supports DPAPI and NSS decryption for other browsers, includes operational evasion features to reduce EDR detection, outputs structured JSON for red-team use, and highlights detection/mitigation opportunities (monitor IElevator COM usage, unexpected headless browser processes, and non-browser reads of browser SQLite files).
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.
