HTTP Session Cloning & Cookie Stealing Tool
ID: d56c1305-0b80-5f29-ac81-7149261d0206
STIX ID: report--d56c1305-0b80-5f29-ac81-7149261d0206
Feed Name: Darknet
Threat Score
DumpBrowserSecrets is a post-exploitation tool that harvests browser-stored credentials and session tokens from major Chromium-based and Firefox browsers by using DLL injection into a headless Chromium process to bypass App‑Bound Encryption (IElevator) and by handling DPAPI/NSS decryption for other browsers; it outputs structured JSON and includes multiple evasion techniques, making it relevant for red-team and adversary use to enable lateral movement and cloud account takeover.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.
