Pass-The-Hash Toolkit v1.3 is Available for Download

DumpBrowserSecrets is a Windows post-exploitation tool that harvests browser-stored credentials (saved passwords, session cookies, OAuth refresh tokens, credit cards, autofill data, history and bookmarks) from major Chromium-based browsers and Firefox by using techniques including headless Chromium instantiation, Early Bird APC DLL injection and an IElevator COM-based App-Bound Encryption bypass; it also handles DPAPI and NSS decryption for other browsers, includes multiple EDR-evasion features, outputs structured JSON, and is intended for red-team use but could be abused by attackers for rapid lateral movement and cloud account takeover.