SUDO_KILLER – Auditing Sudo Configurations for Privilege Escalation Paths

DumpBrowserSecrets is a post‑exploitation credential‑harvesting tool that extracts saved passwords, session cookies, OAuth refresh tokens, credit cards, autofill data and browsing history from Chromium‑based browsers (handling App‑Bound Encryption via a headless Chromium + IElevator DLL injection) and Firefox (via NSS decryption). The report covers implementation details, operational evasion techniques, supported browsers, output format, attack scenarios, detection opportunities, and recommended mitigations for enterprise environments.