Backframe (Formerly Backweb) JavaScript Attack Console

DumpBrowserSecrets is a post-exploitation credential-harvesting tool that targets Chromium-based (Chrome, Edge, Brave, Opera variants, Vivaldi) and Firefox browsers to extract saved logins, cookies, OAuth tokens, credit cards, autofill data and history. It bypasses Chrome's App-Bound Encryption (Chrome 127+) by spawning a headless Chromium process and injecting a DLL to use the IElevator COM interface to decrypt keys, includes DPAPI and NSS handling for other browsers, and implements multiple runtime evasion techniques to reduce EDR detection; output is saved as structured JSON for red team or adversary use.