logo

HTTP Session Cloning & Cookie Stealing Tool

ID: d56c1305-0b80-5f29-ac81-7149261d0206

STIX ID: report--d56c1305-0b80-5f29-ac81-7149261d0206

Feed Name: Darknet

Threat Score
75/100

Date Published: 2010-09-14

Date Updated: 2026-05-13

...
...

DumpBrowserSecrets is a post-exploitation tool that harvests browser-stored credentials and session tokens from major Chromium-based and Firefox browsers by using DLL injection into a headless Chromium process to bypass App‑Bound Encryption (IElevator) and by handling DPAPI/NSS decryption for other browsers; it outputs structured JSON and includes multiple evasion techniques, making it relevant for red-team and adversary use to enable lateral movement and cloud account takeover.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.