HD Moore’s Company BreakingPoint Suffers DNS Attack

DumpBrowserSecrets is a publicly documented post-exploitation credential-harvesting tool that targets major browsers (Chrome, Edge, Brave, Opera variants, Vivaldi, and Firefox) to extract saved passwords, session cookies, OAuth refresh tokens, credit card data, autofill data, history, and bookmarks. It implements an App‑Bound Encryption bypass for Chromium-based browsers by spawning a headless browser and injecting a DLL using Early Bird APC to access the IElevator COM interface, includes DPAPI and NSS handling for other browsers, and contains multiple evasion features; the report also provides usage examples, an attack scenario, and detection/mitigation guidance.