Security & System Auditing Tool for UNIX/Linux
ID: ea022d2f-7ee4-5a15-888b-75abc5fd2292
STIX ID: report--ea022d2f-7ee4-5a15-888b-75abc5fd2292
Feed Name: Darknet
DumpBrowserSecrets is a post-exploitation credential-extraction tool aimed at harvesting saved passwords, session cookies, OAuth refresh tokens, credit card data, autofill entries, and history from major browsers (Chrome, Edge, Brave, Opera, Vivaldi, Opera GX, and Firefox). It implements an App-Bound Encryption bypass for Chromium-based browsers (using a headless process, DLL injection and the IElevator COM interface), handles DPAPI and NSS decryption for other browsers, and includes evasion features (string obfuscation, API hashing, PPID/argument spoofing, file-handle duplication). The tool outputs structured JSON for red-team use and is relevant for assessing credential exposure and endpoint controls that protect browser-stored secrets.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.
