Post-Mortem Data Destruction

DumpBrowserSecrets is a post-exploitation tool that harvests browser-stored credentials (passwords, cookies, OAuth tokens, credit cards, autofill data, history) from major Windows browsers. It bypasses Chrome’s App-Bound Encryption by spawning a headless Chromium process and injecting a DLL to use the IElevator COM interface to decrypt keys, handles DPAPI and NSS decryption for other browsers, includes multiple evasion techniques, and is positioned for red-team assumed-breach testing rather than exfiltration to C2.