OSSEC – Open Source Host-Based Intrusion Detection for Linux, Windows and Unix Systems

DumpBrowserSecrets is a Windows post‑exploitation tool that harvests browser‑stored secrets (cookies, saved logins, OAuth refresh tokens, credit cards, autofill, history) from Chromium‑based browsers and Firefox. It bypasses Chrome's App‑Bound Encryption by spawning a headless Chromium process and injecting a DLL to call the IElevator COM interface (using Early Bird APC injection), supports DPAPI/NSS decryption for other browsers, includes operational evasion features (string obfuscation, API hashing, PPID/argument spoofing, file‑handle duplication), outputs structured JSON, and is intended for red‑team/assumed‑breach testing but presents clear real‑world credential compromise risks to enterprise environments.