Simple Phishing Toolkit Available For Download

DumpBrowserSecrets is a publicly available post‑exploitation tool that harvests browser‑stored credentials and session tokens from Chrome, Edge, Brave, Opera variants, Vivaldi, and Firefox by bypassing App‑Bound Encryption (via headless Chromium + IElevator COM access and Early Bird APC DLL injection) or using DPAPI/NSS decryption where applicable. The tool outputs structured JSON, includes operational evasion features (string obfuscation, API hashing, PPID/argument spoofing, handle duplication, custom SQLite parser), and is intended for red team/assumed‑breach testing but enables rapid lateral movement and cloud account takeover if used maliciously.