logo

Security & System Auditing Tool for UNIX/Linux

ID: ea022d2f-7ee4-5a15-888b-75abc5fd2292

STIX ID: report--ea022d2f-7ee4-5a15-888b-75abc5fd2292

Feed Name: Darknet

Threat Score
75/100

Date Published: 2008-07-15

Date Updated: 2026-05-08

...
...

DumpBrowserSecrets is a post-exploitation credential-extraction tool aimed at harvesting saved passwords, session cookies, OAuth refresh tokens, credit card data, autofill entries, and history from major browsers (Chrome, Edge, Brave, Opera, Vivaldi, Opera GX, and Firefox). It implements an App-Bound Encryption bypass for Chromium-based browsers (using a headless process, DLL injection and the IElevator COM interface), handles DPAPI and NSS decryption for other browsers, and includes evasion features (string obfuscation, API hashing, PPID/argument spoofing, file-handle duplication). The tool outputs structured JSON for red-team use and is relevant for assessing credential exposure and endpoint controls that protect browser-stored secrets.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.