VMWare ESX Source Code Leaked On The Internet
ID: e0e422c6-cfc6-5e82-8ed2-0e33721008dc
STIX ID: report--e0e422c6-cfc6-5e82-8ed2-0e33721008dc
Feed Name: Darknet
DumpBrowserSecrets is a publicly documented post‑exploitation tool that extracts browser‑stored secrets (saved passwords, session cookies, OAuth refresh tokens, credit cards, autofill data, history, and bookmarks) across Chromium‑based and Gecko‑based browsers. It implements a DLL injection + Early Bird APC technique to spawn a headless Chromium process and leverage the IElevator COM interface to decrypt App‑Bound Encryption keys (Chrome/Edge/Brave), handles DPAPI for Opera/Vivaldi and NSS for Firefox, includes multiple evasion features (string obfuscation, API hashing, PPID/argument spoofing, handle duplication, custom SQLite parser), writes structured JSON output, and is framed for red team/assumed‑breach testing while also representing a high‑impact credential theft capability for adversaries.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.
