Smarfuzzer For Generation & Mutation Based Fuzzing
ID: aa8c84d5-6f69-58f6-b7d3-10f603ec6957
STIX ID: report--aa8c84d5-6f69-58f6-b7d3-10f603ec6957
Feed Name: Darknet
DumpBrowserSecrets is a Windows post-exploitation tool that harvests browser-stored secrets (cookies, saved logins, OAuth refresh tokens, credit cards, autofill, history, bookmarks) across Chromium- and Gecko-based browsers by decrypting App-Bound Encryption keys (via injected DLL and the IElevator COM interface), DPAPI keys, or NSS-protected logins; the report details its architecture, evasion features (string obfuscation, API hashing, Early Bird APC injection, PPID/argument spoofing, handle duplication), usage examples, attack scenario, detection opportunities, and mitigations, noting it is published for red-team use but represents a practical threat to enterprise endpoints and SaaS account security.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.
