Pass-The-Hash Toolkit v1.1 Available for Download

DumpBrowserSecrets is a publicly documented post-exploitation tool that harvests credentials and session material from major Windows browsers (Chrome, Edge, Brave, Opera family, Vivaldi, Firefox) by using a headless Chromium process with Early Bird APC DLL injection to bypass App-Bound Encryption (IElevator COM), retrieving DPAPI/NSS secrets where applicable, and outputting structured JSON. The report describes its capabilities, evasion techniques (string obfuscation, API hashing, PPID/argument spoofing, handle duplication), typical attack scenarios and impacts (cloud account takeover, lateral movement), and detection/mitigation guidance for defenders.