Sandcastle – AWS S3 Bucket Enumeration Tool
ID: c143d3ea-113f-5f46-995c-6173b805adad
STIX ID: report--c143d3ea-113f-5f46-995c-6173b805adad
Feed Name: Darknet
DumpBrowserSecrets is a Windows post-exploitation tool that extracts browser-stored credentials and session tokens from Chromium-based (Chrome, Edge, Brave, Opera-family, Vivaldi) and Firefox browsers by using DLL injection into a headless Chromium process to leverage the IElevator COM interface (bypassing App-Bound Encryption) and by handling DPAPI/NSS decryption for other browsers; it outputs structured JSON, includes several evasion techniques to reduce EDR detection, and is positioned as a red-team tool for assessing the risk of browser-based credential exposure.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.
