Envilder – Secure AWS SSM CLI for Environment Variable Management
ID: eb6fcf0d-5237-55ed-800d-21ab707d3db6
STIX ID: report--eb6fcf0d-5237-55ed-800d-21ab707d3db6
Feed Name: Darknet
DumpBrowserSecrets is a precompiled Windows post-exploitation tool that extracts browser-stored secrets (saved logins, cookies, OAuth refresh tokens, credit cards, autofill data, and history) from Chromium-based and Firefox browsers. It implements an App-Bound Encryption bypass for Chrome/Edge/Brave by injecting a DLL into a headless Chromium process to call the IElevator COM interface, handles DPAPI and NSS decryption for other browsers, includes operational evasion features (string obfuscation, API hashing, PPID/argument spoofing, handle duplication), and outputs structured JSON for red-team or penetration testing scenarios.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.
