Which Browser Users Are More Secure?

DumpBrowserSecrets is a post‑exploitation credential‑harvesting tool that extracts saved passwords, session cookies, OAuth refresh tokens, credit cards, autofill data and browsing history from major Windows browsers (Chrome, Edge, Brave, Opera variants, Vivaldi, and Firefox). It bypasses Chrome's App‑Bound Encryption by spawning a headless Chromium process and injecting a DLL to use the IElevator COM interface to decrypt keys, uses DPAPI and NSS methods for other browsers, and includes multiple evasion techniques; output is structured JSON suitable for red‑team use and for testing detection/mitigation controls.