Administer & Audit Multiple Database Servers

DumpBrowserSecrets is a publicly available post-exploitation tool that harvests saved credentials, session cookies, OAuth refresh tokens, credit card data, autofill entries and browsing history from major Windows browsers. It bypasses Chrome App-Bound Encryption by spawning a headless Chromium process and injecting a DLL to use the IElevator COM interface, handles DPAPI and Firefox NSS-based stores, includes operational evasion features aimed at defeating EDR, and is positioned for red-team use but materially increases risk of cloud account takeover and lateral movement if abused by adversaries.