Pass-The-Hash Toolkit v1.4 Released for Download

DumpBrowserSecrets is a post‑exploitation browser credential harvesting tool that extracts saved passwords, session cookies, OAuth refresh tokens, credit card numbers, autofill data and browsing history from Chromium-based browsers (Chrome, Edge, Brave, Opera variants, Vivaldi) and Firefox by bypassing App‑Bound Encryption (via an injected DLL using the IElevator COM interface), DPAPI, and NSS protections; the report details implementation, evasion techniques (string obfuscation, API hashing, PPID/argument spoofing, Early Bird APC injection), usage examples, detection opportunities and mitigations, and frames the tool as useful for red teams while noting its potential for adversary misuse.