logo

Hacking Tools, Hacker News & Cyber Security

ID: fe6aaedf-9d64-577e-9a31-7ca430380649

STIX ID: report--fe6aaedf-9d64-577e-9a31-7ca430380649

Feed Name: Darknet

Threat Score
72/100

Date Published: 2006-11-18

Date Updated: 2026-05-08

...
...

### Executive Summary DumpBrowserSecrets is a post-exploitation credential-harvesting tool that extracts credentials, cookies, OAuth tokens, and autofill data from major browsers (Chrome, Edge, Brave, Opera, Vivaldi, Firefox). It implements an App-Bound Encryption bypass for Chromium-based browsers by spawning a headless process and injecting a DLL to call the IElevator COM interface, supports DPAPI and NSS decryption for other browsers, includes evasion techniques (string obfuscation, API hashing, PPID/argument spoofing, file-handle duplication), and produces structured JSON output for red-team or adversary use; the report also outlines detection opportunities and mitigations.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.