December Commenter of the Month Competition Winner!

DumpBrowserSecrets is a Windows post-exploitation tool that extracts browser-stored secrets (saved logins, cookies, OAuth refresh tokens, credit cards, autofill data, history, and bookmarks) from Chromium-based browsers (including Chrome, Edge, Brave) and Firefox. It implements an App-Bound Encryption bypass for Chrome 127+ by spawning a headless Chromium process and injecting a DLL via Early Bird APC to use the IElevator COM interface to decrypt keys, supports DPAPI and NSS decryption for other browsers, includes operational evasion features (string obfuscation, API hashing, PPID/argument spoofing, handle duplication), outputs structured JSON, and is intended for red-team/assumed-breach testing while also representing a significant credential-theft capability for real attackers.