AIDE – Lightweight Linux Host Intrusion Detection
ID: cf90b8e6-cbd8-5863-a6be-48b0005a300f
STIX ID: report--cf90b8e6-cbd8-5863-a6be-48b0005a300f
Feed Name: Darknet
DumpBrowserSecrets is a public post‑exploitation tool that harvests browser‑stored secrets (saved passwords, session cookies, OAuth refresh tokens, credit card data, autofill entries, history, bookmarks) from Chromium‑based browsers and Firefox. It bypasses Chrome's App‑Bound Encryption by spawning a headless Chromium process, injecting a DLL via Early Bird APC to call the IElevator COM interface, and decrypting stored credentials; the tool includes DPAPI/NSS handling, evasion techniques, and outputs structured JSON for red‑team use and detection testing.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.
