Browser Hooking and Blind XSS Page Mirroring

DumpBrowserSecrets is a post-exploitation credential-harvesting tool that targets major Windows browsers (Chrome, Edge, Brave, Opera variants, Vivaldi, and Firefox) to extract saved credentials, session cookies, OAuth refresh tokens, credit card data, autofill entries, and browsing history. It bypasses Chrome's App-Bound Encryption by spawning a headless Chromium process and injecting a DLL via Early Bird APC to use the IElevator COM interface for key decryption, uses DPAPI for some Chromium forks, and NSS decryption for Firefox; the tool includes evasion features (string obfuscation, API hashing, PPID/argument spoofing, handle duplication) and outputs structured JSON for red-team use while highlighting detection and mitigation strategies.