logo

Automatic Hostname & Virtual Hosts Discovery Tool

ID: e3a7dab4-8a12-54e2-a8d3-f6842b562c34

STIX ID: report--e3a7dab4-8a12-54e2-a8d3-f6842b562c34

Feed Name: Darknet

Threat Score
75/100

Date Published: 2009-12-23

Date Updated: 2026-05-11

...
...

DumpBrowserSecrets is a post‑exploitation credential‑harvesting tool that extracts passwords, session cookies, OAuth refresh tokens, credit card data, autofill entries, and browsing history from major Chromium-based browsers and Firefox. It implements an App‑Bound Encryption bypass for Chrome/Edge/Brave by injecting a DLL into a headless Chromium process to call the IElevator COM interface, handles DPAPI and NSS decryption for other browsers, emits structured JSON output, and includes multiple evasion techniques geared toward red-team or adversary use.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.