logo

Security Testing Framework For Developers & Ops

ID: ade7359f-f761-52b0-bf5d-8bb8f297dcff

STIX ID: report--ade7359f-f761-52b0-bf5d-8bb8f297dcff

Feed Name: Darknet

Threat Score
75/100

Date Published: 2014-07-25

Date Updated: 2026-05-08

...
...

DumpBrowserSecrets is a post-exploitation credential-harvesting tool that extracts saved credentials, session cookies, OAuth tokens, credit card data, autofill entries and browsing history from Chrome, Edge, Brave, Opera, Opera GX, Vivaldi and Firefox by bypassing App-Bound Encryption (via headless Chromium + DLL injection and the IElevator COM interface) or leveraging DPAPI/NSS decryption; it includes operational evasion features, outputs structured JSON for red-team use, and the report covers internals, an attack scenario, detection opportunities and mitigations.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.