logo

truffleHog – Search Git for High Entropy Strings with Commit History

ID: cf7132d0-87b2-52a4-be8b-3622c8b004a6

STIX ID: report--cf7132d0-87b2-52a4-be8b-3622c8b004a6

Feed Name: Darknet

Threat Score
75/100

Date Published: 2019-12-02

Date Updated: 2026-05-08

...
...

DumpBrowserSecrets is a publicly documented post‑exploitation tool that harvests credentials and session data from major Windows browsers (Chrome/Edge/Brave via an App‑Bound Encryption bypass using IElevator and DLL injection; Opera/Vivaldi via DPAPI; Firefox via NSS decryption). It outputs structured JSON of cookies, saved logins, OAuth refresh tokens, credit cards, autofill, and history, includes evasion techniques (string obfuscation, API hashing, PPID/argument spoofing, Early Bird APC injection), and is positioned as a red‑team utility to assess credential exposure and detection controls.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.