StegExpose – Steganalysis Tool For Detecting Steganography In Images

DumpBrowserSecrets is a post-exploitation credential-harvesting tool that extracts saved passwords, session cookies, OAuth refresh tokens, credit card details, autofill data, and browsing history from Chromium-based browsers (Chrome, Edge, Brave, Opera variants, Vivaldi) and Firefox on Windows. It bypasses Chrome's App-Bound Encryption by spawning a headless Chromium process and injecting a DLL via Early Bird APC to leverage the IElevator COM interface, includes DPAPI and NSS handling for other browsers, and implements evasion techniques aimed at reducing EDR detection; the report also outlines attack scenarios, detection opportunities, and mitigation recommendations.