Merry Christmas 2010

DumpBrowserSecrets is a pre‑compiled Windows post‑exploitation tool that harvests browser‑stored secrets (saved logins, session cookies, OAuth refresh tokens, credit cards, autofill, history, bookmarks) from major Chromium and Gecko browsers. It implements an App‑Bound Encryption bypass for Chrome/Edge/Brave by spawning a headless Chromium process and injecting a DLL to call the IElevator COM interface, handles DPAPI for some Chromium forks, and uses NSS decryption for Firefox; the tool includes evasion techniques (string obfuscation, API hashing, PPID/argument spoofing, handle duplication) and outputs structured JSON for red‑team use, with recommended detection opportunities and mitigations described.