Astra – API Automated Security Testing For REST

DumpBrowserSecrets is a post-exploitation credential-harvesting tool that targets major Windows browsers (Chrome/Edge/Brave via App-Bound Encryption bypass, Opera/Vivaldi via DPAPI, and Firefox via NSS) to extract passwords, cookies, OAuth tokens, credit cards, autofill data and history. The tool uses headless Chromium process spawning, Early Bird APC DLL injection with the IElevator COM interface to decrypt app_bound_encrypted_key, handle duplication to bypass file locks, and other evasion techniques; output is structured JSON for red-team use. The report covers usage, attack scenarios, detection opportunities, and mitigation recommendations.