Sububy – A Modular Ruby Suite for Subdomain Enumeration

DumpBrowserSecrets is a publicly documented post-exploitation tool designed to harvest browser-stored credentials and session tokens from major browsers (Chrome, Edge, Brave, Opera variants, Vivaldi, and Firefox). It bypasses App-Bound Encryption in modern Chromium builds by spawning a headless browser and injecting a DLL via Early Bird APC to call the IElevator COM interface, supports DPAPI and NSS decryption where applicable, outputs structured JSON of extracted secrets, and includes operational evasion features aimed at reducing EDR detection—posing a high-risk capability for lateral movement and cloud account takeover in compromised Windows environments.