tko-subs – Detect & Takeover Subdomains With Dead DNS Records

DumpBrowserSecrets is a publicly available post-exploitation tool that harvests browser-stored credentials and session tokens from Chromium-based and Gecko-based browsers by using techniques such as headless Chromium instantiation, Early Bird APC DLL injection, and an IElevator COM-based App-Bound Encryption bypass; the report documents its capabilities, evasion features, extracted artifacts, attack scenarios, detection opportunities, and mitigation recommendations.