logo

Remote Method Enumeration Tool For Flex Servers

ID: eaf88deb-3bf6-5dd3-a9ac-8c7c5d1b949a

STIX ID: report--eaf88deb-3bf6-5dd3-a9ac-8c7c5d1b949a

Feed Name: Darknet

Threat Score
75/100

Date Published: 2009-03-26

Date Updated: 2026-05-08

...
...

DumpBrowserSecrets is a post‑exploitation credential harvesting tool for Windows that extracts saved passwords, session cookies, OAuth refresh tokens, credit card data and browsing history from Chromium‑based browsers (Chrome, Edge, Brave, Opera variants, Vivaldi) and Firefox. It implements a bypass for Chrome's App‑Bound Encryption by spawning a headless Chromium process and injecting a DLL via Early Bird APC to use the IElevator COM interface to decrypt keys, supports DPAPI and NSS decryption for other browsers, includes multiple operational evasion techniques, writes structured JSON output, and is intended for red team/assumed‑breach testing while illustrating a high‑impact credential theft vector.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.