The Most Advanced Linux Security Distribution & LiveCD
ID: bb580bfa-741d-57f2-894c-3bbff8584365
STIX ID: report--bb580bfa-741d-57f2-894c-3bbff8584365
Feed Name: Darknet
DumpBrowserSecrets is a post-exploitation credential-harvesting tool that extracts saved passwords, session cookies, OAuth tokens, credit cards and browsing data from Chrome, Edge, Brave, Opera (and variants), Vivaldi and Firefox by bypassing App-Bound Encryption (via spawning headless Chromium and IElevator COM access with DLL injection), DPAPI, and NSS; the README describes capabilities, evasion techniques, usage, detection opportunities and mitigation guidance for red-team and assumed-breach testing.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.
