BloodHound – Hacking Active Directory Trust Relationships

DumpBrowserSecrets is a post-exploitation Windows tool (binary + DLL) that harvests credentials and session tokens from major Chromium- and Gecko-based browsers by bypassing App-Bound Encryption (via spawning a headless Chromium process and using IElevator COM with early-bird APC DLL injection), retrieving DPAPI keys for some browsers, and handling Firefox NSS decryption. It outputs structured JSON, includes multiple EDR-evasion features (string obfuscation, API hashing, PPID/argument spoofing, file-handle duplication, custom SQLite parser), and is presented as a red-team utility for assessing credential exposure and endpoint controls.