Multi-Purpose Application Input Fuzzing Tool

DumpBrowserSecrets is a publicly released post‑exploitation tool that harvests browser-stored credentials and session tokens from major Windows browsers (Chrome, Edge, Brave, Opera variants, Vivaldi, and Firefox). It bypasses Chrome’s App‑Bound Encryption by spawning a headless Chromium process and injecting a DLL that uses the IElevator COM interface to decrypt keys, uses DPAPI or NSS where applicable, and writes structured JSON output; the tool includes multiple operational evasion techniques and is intended for red team/assumed‑breach testing but represents a realistic threat to credential and SaaS account security.