logo

Metasploit 3.3 Released! Exploitation Framework

ID: ad52f8d4-8b30-5a14-bbf1-9b4229a0827b

STIX ID: report--ad52f8d4-8b30-5a14-bbf1-9b4229a0827b

Feed Name: Darknet

Threat Score
75/100

Date Published: 2009-11-24

Date Updated: 2026-05-12

...
...

DumpBrowserSecrets is a publicly documented post‑exploitation tool that harvests browser-stored secrets (saved passwords, session cookies, OAuth refresh tokens, credit cards, autofill data, and history) from Chromium-based browsers (including an App‑Bound Encryption bypass via DLL injection and IElevator COM usage) and Firefox (NSS decryption). The README covers technical operation, evasion features, example attack scenarios, detection opportunities, and mitigation guidance, making it a high-risk capability for lateral movement and cloud account takeover if misused.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.