httprecon – Advanced Web Server Fingerprinting

DumpBrowserSecrets is a precompiled Windows post-exploitation tool that harvests browser-stored secrets (saved logins, session cookies, OAuth refresh tokens, credit cards, autofill data, history and bookmarks) from Chromium-based browsers and Firefox. It implements a bypass for Chrome's App-Bound Encryption by injecting a DLL into a spawned headless Chromium process to use the IElevator COM interface, handles DPAPI/NSS decryption for other browsers, and includes operational evasion features; the report describes usage, extracted data, detection opportunities, and mitigations for red-team or defensive testing.