Passwords Passe at RSA

DumpBrowserSecrets is a post‑exploitation credential‑harvesting tool targeting Windows browsers (Chrome/Edge/Brave via App‑Bound Encryption bypass, Opera/Opera GX/Vivaldi via DPAPI, and Firefox via NSS). It uses headless Chromium + Early Bird APC DLL injection to access the IElevator COM interface and decrypt app_bound_encrypted_key, includes evasion techniques (string obfuscation, API hashing, PPID/argument spoofing, handle duplication), outputs structured JSON of extracted credentials and tokens, and is positioned for red‑team assumed‑breach testing while posing a high risk for credential theft and cloud account takeover if abused.