Download pwdump6 and fgdump version 1.6.0 available now.

DumpBrowserSecrets is a publicly available post‑exploitation tool that harvests browser-stored credentials and session tokens from major browsers (Chrome, Edge, Brave, Opera variants, Vivaldi, and Firefox). It implements an App‑Bound Encryption bypass for Chromium-based browsers by spawning a headless Chromium process and injecting a DLL to call the IElevator COM interface, retrieves DPAPI and NSS secrets where applicable, and includes operational evasion features (string obfuscation, API hashing, PPID/argument spoofing, Early Bird APC injection). The tool outputs structured JSON of extracted credentials and tokens, enabling rapid lateral movement and cloud account takeover, and the report outlines detection opportunities and mitigation strategies for enterprise defenders.