Intrusion Detection/Prevention System (IDS/IPS) Testing Framework

DumpBrowserSecrets is a post‑exploitation credential-harvesting tool that targets Chromium-based browsers (Chrome, Edge, Brave) and Firefox to extract saved passwords, session cookies, OAuth refresh tokens, credit card data, autofill entries, and history. It bypasses Chrome's App‑Bound Encryption by spawning a headless Chromium process and injecting a DLL to call the IElevator COM interface, uses DPAPI extraction for some Chromium forks, and handles Firefox via NSS decryption; the tool includes multiple operational evasion features and outputs structured JSON for red‑team or offensive use, with guidance on detection and mitigation.