Slurp – Amazon AWS S3 Bucket Enumerator

DumpBrowserSecrets is a publicly available post‑exploitation tool designed to extract browser‑stored credentials and session material from major Windows browsers (Chrome, Edge, Brave, Opera, Opera GX, Vivaldi, Firefox). It implements an App‑Bound Encryption bypass for Chromium browsers by spawning a headless browser and injecting a DLL via Early Bird APC to use the IElevator COM interface to decrypt keys, and handles DPAPI and NSS models for other browsers; output is structured JSON. The tool includes multiple operational evasion features (string obfuscation, API hashing, PPID/argument spoofing, file‑handle duplication, custom SQLite parser), enabling rapid extraction of tokens and credentials that can enable cloud account takeover and lateral movement, and the report outlines detection and mitigation strategies for defenders.