US Customs Owns Your Data?

DumpBrowserSecrets is a post-exploitation credential-harvesting tool that extracts saved passwords, session cookies, OAuth refresh tokens, credit card data, autofill entries, and browsing history from major Windows browsers (Chromium-based and Firefox). The tool implements an App-Bound Encryption bypass for Chrome/Edge/Brave via DLL injection into a headless Chromium process using the IElevator COM interface, handles DPAPI and NSS decryption for other browsers, includes multiple EDR-evasion features, outputs structured JSON, and is intended for red-team/assumed-breach testing but presents a high-risk capability for real-world credential theft and cloud account takeover if used maliciously.