Automatic Hostname & Virtual Hosts Discovery Tool
ID: e3a7dab4-8a12-54e2-a8d3-f6842b562c34
STIX ID: report--e3a7dab4-8a12-54e2-a8d3-f6842b562c34
Feed Name: Darknet
DumpBrowserSecrets is a post‑exploitation credential‑harvesting tool that extracts passwords, session cookies, OAuth refresh tokens, credit card data, autofill entries, and browsing history from major Chromium-based browsers and Firefox. It implements an App‑Bound Encryption bypass for Chrome/Edge/Brave by injecting a DLL into a headless Chromium process to call the IElevator COM interface, handles DPAPI and NSS decryption for other browsers, emits structured JSON output, and includes multiple evasion techniques geared toward red-team or adversary use.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.
