truffleHog – Search Git for High Entropy Strings with Commit History
ID: cf7132d0-87b2-52a4-be8b-3622c8b004a6
STIX ID: report--cf7132d0-87b2-52a4-be8b-3622c8b004a6
Feed Name: Darknet
DumpBrowserSecrets is a publicly documented post‑exploitation tool that harvests credentials and session data from major Windows browsers (Chrome/Edge/Brave via an App‑Bound Encryption bypass using IElevator and DLL injection; Opera/Vivaldi via DPAPI; Firefox via NSS decryption). It outputs structured JSON of cookies, saved logins, OAuth refresh tokens, credit cards, autofill, and history, includes evasion techniques (string obfuscation, API hashing, PPID/argument spoofing, Early Bird APC injection), and is positioned as a red‑team utility to assess credential exposure and detection controls.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.
