Argus – Ultimate Reconnaissance Toolkit for Offensive Recon Operations
ID: e1b129b5-db24-5d79-bbcd-11553c3dfadb
STIX ID: report--e1b129b5-db24-5d79-bbcd-11553c3dfadb
Feed Name: Darknet
DumpBrowserSecrets is a publicly released post-exploitation tool that harvests browser-stored secrets (saved logins, cookies, OAuth tokens, credit cards, autofill, history, bookmarks) from Chrome, Edge, Brave, Opera, Opera GX, Vivaldi, and Firefox on Windows. It implements an App-Bound Encryption bypass for Chromium browsers by injecting a DLL into a headless Chromium process to use the IElevator COM interface, handles DPAPI and NSS decryption for other browsers, includes multiple EDR-evasion features, and is presented with usage, detection opportunities, and mitigation guidance for red teams and defenders.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.
