Custom Word List Generator Tool for Password Cracking

DumpBrowserSecrets is a publicly available post‑exploitation tool that harvests browser‑stored secrets (saved logins, session cookies, OAuth refresh tokens, credit cards, autofill, history, and bookmarks) from major Chromium-based browsers and Firefox. It bypasses Chrome's App‑Bound Encryption by spawning a headless Chromium process and injecting a DLL via Early Bird APC to call the IElevator COM interface to decrypt the app_bound_encrypted_key, uses DPAPI or NSS handling for other browsers, includes operational evasion features, and outputs structured JSON for red‑team or offensive use—highlighting a significant credential exposure risk on compromised developer endpoints.