Debian Development Machine ‘gluck’ Hacked!

DumpBrowserSecrets is a precompiled Windows post-exploitation tool that harvests credentials and session data from major browsers (Chrome, Edge, Brave, Opera variants, Vivaldi, and Firefox). It uses DLL injection into a headless Chromium process and the IElevator COM interface to bypass Chrome's App-Bound Encryption for Chromium-based browsers, retrieves DPAPI or NSS-protected secrets where applicable, and writes structured JSON output. The report details operational features (string obfuscation, API hashing, PPID/argument spoofing, handle duplication), supported extraction types (cookies, logins, OAuth tokens, credit cards, autofill, history), detection opportunities, and recommended mitigations for enterprise environments.