TREVORspray – Credential Spray Toolkit for Azure, Okta, OWA & More

DumpBrowserSecrets is a publicly available post-exploitation tool that harvests browser-stored credentials and session tokens from major browsers (Chrome, Edge, Brave, Opera variants, Vivaldi, and Firefox). It implements an App‑Bound Encryption bypass for Chromium-based browsers by injecting a DLL into a headless browser process to call the IElevator COM interface, includes DPAPI and NSS handling, and provides operational evasion features; the report explains its capabilities, use cases for red teams, detection opportunities, and mitigation guidance.