Acunetix Web Vulnerability Scanner 6 Review
ID: f5733464-c314-5f60-9131-20e04cfd44a3
STIX ID: report--f5733464-c314-5f60-9131-20e04cfd44a3
Feed Name: Darknet
DumpBrowserSecrets is a Windows post‑exploitation tool that harvests stored credentials, cookies, OAuth tokens, credit card data, autofill, and history from major Chromium-based and Firefox browsers. It implements a DLL injection + IElevator COM bypass to defeat Chrome’s App‑Bound Encryption, uses DPAPI/NSS handling for other browsers, includes multiple EDR-evasion features, and outputs structured JSON for red‑team or adversary use, making it a high-risk capability for lateral movement and cloud account takeover if deployed on compromised developer endpoints.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.
