Impressive Open Source Intrusion Prevention

DumpBrowserSecrets is a publicly documented post‑exploitation tool that harvests browser‑stored secrets (saved credentials, session cookies, OAuth refresh tokens, credit cards, autofill data, history, bookmarks) from major Chromium‑based browsers and Firefox. It uses a compiled executable plus a DLL injected into a headless Chromium process to bypass App‑Bound Encryption (via the IElevator COM interface and Early Bird APC injection), handles DPAPI and NSS decryption for other browsers, includes operational evasion features, and outputs structured JSON for red‑team or adversary use; the report also outlines detection opportunities and mitigations.