logo

Sandcastle – AWS S3 Bucket Enumeration Tool

ID: c143d3ea-113f-5f46-995c-6173b805adad

STIX ID: report--c143d3ea-113f-5f46-995c-6173b805adad

Feed Name: Darknet

Threat Score
70/100

Date Published: 2020-03-24

Date Updated: 2026-05-08

...
...

DumpBrowserSecrets is a Windows post-exploitation tool that extracts browser-stored credentials and session tokens from Chromium-based (Chrome, Edge, Brave, Opera-family, Vivaldi) and Firefox browsers by using DLL injection into a headless Chromium process to leverage the IElevator COM interface (bypassing App-Bound Encryption) and by handling DPAPI/NSS decryption for other browsers; it outputs structured JSON, includes several evasion techniques to reduce EDR detection, and is positioned as a red-team tool for assessing the risk of browser-based credential exposure.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.