logo

Smarfuzzer For Generation & Mutation Based Fuzzing

ID: aa8c84d5-6f69-58f6-b7d3-10f603ec6957

STIX ID: report--aa8c84d5-6f69-58f6-b7d3-10f603ec6957

Feed Name: Darknet

Threat Score
72/100

Date Published: 2010-08-05

Date Updated: 2026-05-11

...
...

DumpBrowserSecrets is a Windows post-exploitation tool that harvests browser-stored secrets (cookies, saved logins, OAuth refresh tokens, credit cards, autofill, history, bookmarks) across Chromium- and Gecko-based browsers by decrypting App-Bound Encryption keys (via injected DLL and the IElevator COM interface), DPAPI keys, or NSS-protected logins; the report details its architecture, evasion features (string obfuscation, API hashing, Early Bird APC injection, PPID/argument spoofing, handle duplication), usage examples, attack scenario, detection opportunities, and mitigations, noting it is published for red-team use but represents a practical threat to enterprise endpoints and SaaS account security.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.