Modular Deliberately Vulnerable Web Application

DumpBrowserSecrets is a post‑exploitation credential harvesting tool (Windows executable + DLL) that extracts browser-stored secrets from Chrome/Edge/Brave (via an App‑Bound Encryption bypass using a headless Chromium process and DLL injection), Opera/Vivaldi variants (DPAPI), and Firefox (NSS). The tool outputs structured JSON, includes EDR-evasion features (string obfuscation, API hashing, PPID/argument spoofing, handle duplication, custom SQLite parser), and is positioned for red team/assumed-breach exercises but increases real-world risk by enabling rapid SaaS account takeover and lateral movement when run on compromised developer endpoints.