Breach WAS Serious & Disclosed Bank Details

DumpBrowserSecrets is a post-exploitation credential-harvesting tool that extracts saved passwords, cookies, OAuth refresh tokens, credit card data, autofill entries, and browsing history from major Chromium-based browsers and Firefox on Windows. It implements an App‑Bound Encryption bypass for Chrome/Edge/Brave via spawning a headless Chromium process and DLL injection (Early Bird APC) to call the IElevator COM interface, handles DPAPI and NSS decryption for other browsers, and includes operational evasion features (string obfuscation, API hashing, PPID/argument spoofing, handle duplication, and a custom SQLite parser). The tool outputs structured JSON for red-team use and is intended to test endpoint detection and the blast radius of compromised developer workstations.