New & Free Open-source XSS and SQL Injection Scanner for PHP Programs

DumpBrowserSecrets is a post-exploitation credential-harvesting tool that targets major Windows browsers (Chrome, Edge, Brave, Opera, Opera GX, Vivaldi, and Firefox) to extract saved passwords, session cookies, OAuth refresh tokens, credit cards, autofill data, history and bookmarks. It uses an App-Bound Encryption bypass for Chromium-based browsers by spawning a headless process and injecting a DLL via Early Bird APC to call the IElevator COM interface, and it supports DPAPI and NSS decryption for other browsers; the report also documents evasion techniques, example attack scenarios, detection points, and mitigation recommendations.