Google Safe Browsing Extension for Firefox & Netcraft Toolbar

DumpBrowserSecrets is a post‑exploitation credential‑harvesting tool aimed at extracting browser‑stored secrets (saved passwords, session cookies, OAuth refresh tokens, credit cards, autofill data, history, bookmarks) from major Chromium‑based and Firefox browsers. It implements an App‑Bound Encryption bypass for Chrome/Edge/Brave via spawning a headless Chromium process and injecting a DLL (Early Bird APC) to call the IElevator COM interface, retrieves DPAPI keys for Opera/Vivaldi variants, and uses NSS decryption for Firefox; the tool includes operational evasion features (string obfuscation, API hashing, PPID/argument spoofing, handle duplication) and outputs structured JSON for red‑team use, while the report outlines detection vectors and mitigations.