Web Application Vulnerability Scanning Framework

DumpBrowserSecrets is a public post-exploitation tool that extracts credentials and session tokens from major Windows browsers (Chrome/Edge/Brave via App-Bound Encryption bypass, Opera/Vivaldi via DPAPI, and Firefox via NSS). It uses headless Chromium + Early Bird APC DLL injection to call the IElevator COM interface and retrieve encryption keys, outputs structured JSON, and includes multiple evasion techniques, making it a potent capability for lateral movement and cloud account takeover during assumed-breach exercises.