thermoptic – Chrome-perfect HTTP Fingerprint Cloaking for Red Team Web Ops

DumpBrowserSecrets is a post-exploitation Windows tool that harvests credentials and session tokens from major Chromium- and Gecko-based browsers by bypassing App‑Bound Encryption (via spawning a headless Chromium process and DLL injection using an IElevator COM bypass), extracting DPAPI or NSS-protected secrets, and outputting structured JSON; it includes multiple evasion techniques for EDR and is aimed at red-team use but is readily weaponizable by attackers.