logo

Hacking Tools, Hacker News & Cyber Security

ID: c90a1751-1d41-5c3f-a9ac-1669006ce8c1

STIX ID: report--c90a1751-1d41-5c3f-a9ac-1669006ce8c1

Feed Name: Darknet

Threat Score
75/100

Date Published: 2008-03-13

Date Updated: 2026-05-08

...
...

DumpBrowserSecrets is a post‑exploitation credential‑harvesting tool (executable + injected DLL) that extracts saved passwords, cookies, OAuth refresh tokens, credit card data, autofill entries and browsing history from major Chromium‑based and Firefox browsers by bypassing App‑Bound Encryption (via IElevator COM inside an injected headless Chromium process) and DPAPI/NSS protections; the report documents its implementation, evasion features, detection opportunities, and red‑team relevance.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.