Secunia Personal Software Inspector (PSI) 1.0

DumpBrowserSecrets is a post-exploitation credential-harvesting tool designed for Windows that extracts saved passwords, session cookies, OAuth refresh tokens, credit card data, autofill entries and browsing history from major Chromium-based browsers (Chrome, Edge, Brave, Opera variants, Vivaldi) and Firefox. It bypasses Chrome's App-Bound Encryption by spawning a headless Chromium process and injecting a DLL to use the IElevator COM interface to decrypt the app-bound key, uses DPAPI or NSS handling for other browsers, and includes evasion features (string obfuscation, API hashing, PPID/argument spoofing, handle duplication). The report covers usage, extracted data formats, an attack scenario, detection avenues (process injection, IElevator calls, DB reads), and mitigation advice such as using external password managers and EDR rules to detect the described behaviours.