Metasploit 3.3 Released! Exploitation Framework
ID: ad52f8d4-8b30-5a14-bbf1-9b4229a0827b
STIX ID: report--ad52f8d4-8b30-5a14-bbf1-9b4229a0827b
Feed Name: Darknet
DumpBrowserSecrets is a publicly documented post‑exploitation tool that harvests browser-stored secrets (saved passwords, session cookies, OAuth refresh tokens, credit cards, autofill data, and history) from Chromium-based browsers (including an App‑Bound Encryption bypass via DLL injection and IElevator COM usage) and Firefox (NSS decryption). The README covers technical operation, evasion features, example attack scenarios, detection opportunities, and mitigation guidance, making it a high-risk capability for lateral movement and cloud account takeover if misused.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.
