Gentoo Based Penetration Testing Linux LiveCD
ID: e8a11c86-f2a5-5d45-bc47-ca79213c94ec
STIX ID: report--e8a11c86-f2a5-5d45-bc47-ca79213c94ec
Feed Name: Darknet
DumpBrowserSecrets is a Windows post-exploitation credential-harvesting tool that extracts saved passwords, session cookies, OAuth refresh tokens, credit card data, autofill entries, and history from Chromium-based browsers (Chrome, Edge, Brave, Opera variants, Vivaldi) and Firefox; it bypasses Chrome's App-Bound Encryption by injecting a DLL into a headless Chromium process to call the IElevator COM interface, includes DPAPI/NSS handling, EDR-evasion features, and outputs structured JSON intended for red-team use but usable by adversaries for cloud account takeover and lateral movement.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.
