logo

Gentoo Based Penetration Testing Linux LiveCD

ID: e8a11c86-f2a5-5d45-bc47-ca79213c94ec

STIX ID: report--e8a11c86-f2a5-5d45-bc47-ca79213c94ec

Feed Name: Darknet

Threat Score
75/100

Date Published: 2015-03-30

Date Updated: 2026-05-08

...
...

DumpBrowserSecrets is a Windows post-exploitation credential-harvesting tool that extracts saved passwords, session cookies, OAuth refresh tokens, credit card data, autofill entries, and history from Chromium-based browsers (Chrome, Edge, Brave, Opera variants, Vivaldi) and Firefox; it bypasses Chrome's App-Bound Encryption by injecting a DLL into a headless Chromium process to call the IElevator COM interface, includes DPAPI/NSS handling, EDR-evasion features, and outputs structured JSON intended for red-team use but usable by adversaries for cloud account takeover and lateral movement.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.