GUI Front-End For GoogleDiggity & BingDiggity

DumpBrowserSecrets is a post‑exploitation credential‑harvesting tool that extracts saved passwords, session cookies, OAuth refresh tokens, credit card data, autofill entries, and history from Chromium-based browsers (including Chrome, Edge, Brave, Opera variants, Vivaldi) and Firefox. It implements an App‑Bound Encryption bypass for Chrome 127+ by injecting a DLL into a headless Chromium process to access the IElevator COM interface, includes DPAPI/NSS handling for other browsers, and incorporates evasion techniques (string obfuscation, API hashing, PPID/argument spoofing, file-handle duplication). The report covers usage, attack scenarios, detection opportunities (injection, IElevator calls, non-browser reads of Login Data/Cookies/Web Data), and mitigations such as using native credential managers and EDRs that monitor IElevator and headless browser instantiation.