Security Testing Framework For Developers & Ops
ID: ade7359f-f761-52b0-bf5d-8bb8f297dcff
STIX ID: report--ade7359f-f761-52b0-bf5d-8bb8f297dcff
Feed Name: Darknet
DumpBrowserSecrets is a post-exploitation credential-harvesting tool that extracts saved credentials, session cookies, OAuth tokens, credit card data, autofill entries and browsing history from Chrome, Edge, Brave, Opera, Opera GX, Vivaldi and Firefox by bypassing App-Bound Encryption (via headless Chromium + DLL injection and the IElevator COM interface) or leveraging DPAPI/NSS decryption; it includes operational evasion features, outputs structured JSON for red-team use, and the report covers internals, an attack scenario, detection opportunities and mitigations.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.
