Crowdsourced Reverse Engineering Service From CrowdStrike

DumpBrowserSecrets is a post‑exploitation credential‑harvesting tool that extracts passwords, cookies, OAuth tokens, credit card data and browsing history from Chrome, Edge, Brave, Opera variants, Vivaldi and Firefox. It bypasses Chrome’s App‑Bound Encryption by spawning a headless Chromium process and injecting a DLL via Early Bird APC to use the IElevator COM interface, handles DPAPI and NSS decryptions for other browsers, includes evasion features (string obfuscation, API hashing, PPID/argument spoofing, handle duplication), outputs structured JSON, and is intended for red‑team/assumed‑breach testing while also representing a high‑value capability for real attackers.