FISMA Compliance & Risk Management Application

DumpBrowserSecrets is a publicly documented post‑exploitation tool that harvests browser‑stored secrets (passwords, cookies, OAuth tokens, credit cards, autofill and history) from Chromium‑based and Firefox browsers. It bypasses Chrome's App‑Bound Encryption by injecting a DLL into a headless Chromium process to call the IElevator COM interface, handles DPAPI and NSS decryption for other browsers, includes operational evasion features (string obfuscation, API hashing, PPID/argument spoofing, file‑handle duplication) and outputs structured JSON for red‑team or adversary use; the report highlights detection opportunities and mitigation guidance.