Double For Your Money With Acunetix Vulnerability Scanner
ID: ad28a4ba-6c69-5e01-a4cc-305b01b1cf3b
STIX ID: report--ad28a4ba-6c69-5e01-a4cc-305b01b1cf3b
Feed Name: Darknet
DumpBrowserSecrets is a post-exploitation credential-harvesting tool that extracts saved passwords, cookies, OAuth refresh tokens, credit card numbers and other browser-stored secrets from Chromium-based browsers (Chrome, Edge, Brave, Opera variants, Vivaldi) and Firefox. The tool bypasses Chrome's App‑Bound Encryption by spawning a headless Chromium process and injecting a DLL via Early Bird APC to call the IElevator COM interface, supports DPAPI/NSS for other browsers, includes multiple EDR-evasion techniques, and is presented with usage, detection opportunities, and mitigation advice for red-team and defensive validation.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.
