Hacking Tools, Hacker News & Cyber Security
ID: c90a1751-1d41-5c3f-a9ac-1669006ce8c1
STIX ID: report--c90a1751-1d41-5c3f-a9ac-1669006ce8c1
Feed Name: Darknet
DumpBrowserSecrets is a post‑exploitation credential‑harvesting tool (executable + injected DLL) that extracts saved passwords, cookies, OAuth refresh tokens, credit card data, autofill entries and browsing history from major Chromium‑based and Firefox browsers by bypassing App‑Bound Encryption (via IElevator COM inside an injected headless Chromium process) and DPAPI/NSS protections; the report documents its implementation, evasion features, detection opportunities, and red‑team relevance.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.
