logo

Envilder – Secure AWS SSM CLI for Environment Variable Management

ID: eb6fcf0d-5237-55ed-800d-21ab707d3db6

STIX ID: report--eb6fcf0d-5237-55ed-800d-21ab707d3db6

Feed Name: Darknet

Threat Score
75/100

Date Published: 2025-06-13

Date Updated: 2026-05-11

...
...

DumpBrowserSecrets is a precompiled Windows post-exploitation tool that extracts browser-stored secrets (saved logins, cookies, OAuth refresh tokens, credit cards, autofill data, and history) from Chromium-based and Firefox browsers. It implements an App-Bound Encryption bypass for Chrome/Edge/Brave by injecting a DLL into a headless Chromium process to call the IElevator COM interface, handles DPAPI and NSS decryption for other browsers, includes operational evasion features (string obfuscation, API hashing, PPID/argument spoofing, handle duplication), and outputs structured JSON for red-team or penetration testing scenarios.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.