Portable Go Offensive Security Tools

DumpBrowserSecrets is a post-exploitation credential-harvesting tool that targets major Windows browsers (Chrome, Edge, Brave, Opera, Vivaldi, Firefox) to extract saved credentials, session cookies, OAuth tokens, credit cards and browsing history. It bypasses Chrome's App-Bound Encryption by spawning a headless Chromium process and injecting a DLL to call the IElevator COM interface, includes DPAPI and NSS handling for other browsers, and implements operational evasion (string obfuscation, API hashing, PPID/argument spoofing, Early Bird APC injection). The report outlines usage, attack scenarios, detection opportunities (unusual process injection, IElevator calls, reads of browser SQLite files) and mitigation recommendations.