PHP Application For SQL Injection Detection & Exploitation

DumpBrowserSecrets is a post-exploitation credential-harvesting tool that extracts saved passwords, cookies, OAuth refresh tokens, credit card data, autofill entries, and browsing history from Chromium- and Gecko-based browsers on Windows; it bypasses Chrome App‑Bound Encryption by spawning a headless Chromium process and injecting a DLL to use the IElevator COM interface, supports DPAPI and NSS decryption for other browsers, includes multiple evasion techniques (string obfuscation, API hashing, PPID/argument spoofing, Early Bird APC injection), outputs structured JSON, and completes extraction rapidly—making it a high-impact capability for red teams and a serious offensive tool if abused.