Hacking Tools, Hacker News & Cyber Security
ID: fe6aaedf-9d64-577e-9a31-7ca430380649
STIX ID: report--fe6aaedf-9d64-577e-9a31-7ca430380649
Feed Name: Darknet
### Executive Summary DumpBrowserSecrets is a post-exploitation credential-harvesting tool that extracts credentials, cookies, OAuth tokens, and autofill data from major browsers (Chrome, Edge, Brave, Opera, Vivaldi, Firefox). It implements an App-Bound Encryption bypass for Chromium-based browsers by spawning a headless process and injecting a DLL to call the IElevator COM interface, supports DPAPI and NSS decryption for other browsers, includes evasion techniques (string obfuscation, API hashing, PPID/argument spoofing, file-handle duplication), and produces structured JSON output for red-team or adversary use; the report also outlines detection opportunities and mitigations.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.
