Hacking Tools, Hacker News & Cyber Security
ID: d559648b-9703-5ae2-9205-819c5e5be305
STIX ID: report--d559648b-9703-5ae2-9205-819c5e5be305
Feed Name: Darknet
**DumpBrowserSecrets** is a post-exploitation credential-harvesting tool that extracts passwords, session cookies, OAuth refresh tokens, credit card data, autofill entries, history, and bookmarks from Chromium-based browsers (Chrome, Edge, Brave, Opera variants, Vivaldi) and Firefox by leveraging techniques such as Early Bird APC DLL injection into a headless Chromium process to use the IElevator COM interface to decrypt App‑Bound Encryption keys, DPAPI extraction, and NSS decryption; the report covers technical implementation, evasion features, output formats, detection opportunities, and mitigation advice for red team and defensive testing.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.
