CMS Identification & Information Gathering Tool

DumpBrowserSecrets is a publicly documented post‑exploitation tool that harvests browser-stored credentials and session tokens from Chrome, Edge, Brave, Opera variants, Vivaldi, and Firefox by decrypting browser vaults (including an IElevator COM-based bypass of Chrome's App‑Bound Encryption). It uses a compiled executable plus a DLL injected into a headless Chromium process (Early Bird APC) to retrieve encryption keys, parses on-disk SQLite/JSON stores, and writes structured JSON output; operational evasion features and use cases for lateral movement and cloud account takeover are described along with detection and mitigation guidance.