Clear Your Cookies? You Can’t Escape Canvas Fingerprinting

DumpBrowserSecrets is a post‑exploitation credential‑harvesting tool that extracts saved passwords, session cookies, OAuth refresh tokens, credit card data, autofill entries, and browsing history from Chromium‑based and Firefox browsers on Windows. It bypasses Chrome's App‑Bound Encryption by spawning a headless Chromium process and injecting a DLL to use the IElevator COM interface (and retrieves DPAPI/NSS keys for other browsers), includes runtime evasion features to reduce EDR detection, outputs structured JSON, and is intended for red team/assumed‑breach testing but poses a high risk for credential and cloud account compromise if used maliciously.