logo

Hacking Tools, Hacker News & Cyber Security

ID: d65517d4-665c-5f27-b6b5-aa934bf35049

STIX ID: report--d65517d4-665c-5f27-b6b5-aa934bf35049

Feed Name: Darknet

Threat Score
75/100

Date Published: 2016-02-08

Date Updated: 2026-05-11

...
...

DumpBrowserSecrets is a post‑exploitation credential‑harvesting tool that extracts saved passwords, session cookies, OAuth refresh tokens, credit card data, autofill entries and browsing history from Chrome, Edge, Brave, Opera, Opera GX, Vivaldi and Firefox. It bypasses App‑Bound Encryption in Chromium builds by spawning a headless browser and injecting a DLL via Early Bird APC to use the IElevator COM interface, retrieves DPAPI/NSS keys where applicable, includes multiple operational evasion features, outputs structured JSON, and is distributed as a precompiled Windows executable with source available on GitHub.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.