Web Application Security Test & Assessment Tool

DumpBrowserSecrets is a Windows post-exploitation credential-harvesting tool that extracts saved credentials, session cookies, OAuth tokens, credit card data, autofill entries, and browsing history from Chromium-based (Chrome, Edge, Brave, Opera, Vivaldi) and Gecko-based (Firefox) browsers. It bypasses Chrome's App-Bound Encryption by spawning a headless Chromium process and injecting a DLL via Early Bird APC to use the IElevator COM interface to decrypt keys, supports DPAPI and NSS decryption for other browsers, includes operational evasion features (string obfuscation, API hashing, PPID/argument spoofing, handle duplication, custom SQLite parser), and outputs structured JSON for use in red team or offensive operations—creating a realistic risk for lateral movement and cloud account takeover if used by malicious actors.