Burp Suite v1.1 Available for Download
ID: c520419e-629f-5897-8da0-53b8b7d70673
STIX ID: report--c520419e-629f-5897-8da0-53b8b7d70673
Feed Name: Darknet
DumpBrowserSecrets is a publicly available post-exploitation tool that extracts browser-stored secrets (passwords, session cookies, OAuth refresh tokens, credit cards, autofill data, and history) from Chrome, Edge, Brave, Opera-family browsers, Vivaldi, and Firefox. The tool implements an App-Bound Encryption bypass for Chromium-based browsers by spawning a headless Chromium process and injecting a DLL via Early Bird APC to use the IElevator COM interface, handles DPAPI and NSS decryption for other browsers, and includes multiple evasion features; it is positioned for red-team/assumed-breach use but presents a high-risk capability if adopted by real-world threat actors.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.
