Remote Method Enumeration Tool For Flex Servers
ID: eaf88deb-3bf6-5dd3-a9ac-8c7c5d1b949a
STIX ID: report--eaf88deb-3bf6-5dd3-a9ac-8c7c5d1b949a
Feed Name: Darknet
DumpBrowserSecrets is a post‑exploitation credential harvesting tool for Windows that extracts saved passwords, session cookies, OAuth refresh tokens, credit card data and browsing history from Chromium‑based browsers (Chrome, Edge, Brave, Opera variants, Vivaldi) and Firefox. It implements a bypass for Chrome's App‑Bound Encryption by spawning a headless Chromium process and injecting a DLL via Early Bird APC to use the IElevator COM interface to decrypt keys, supports DPAPI and NSS decryption for other browsers, includes multiple operational evasion techniques, writes structured JSON output, and is intended for red team/assumed‑breach testing while illustrating a high‑impact credential theft vector.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.
