Test SSL Security Including Ciphers, Protocols & Detect Flaws

DumpBrowserSecrets is a publicly available post-exploitation tool designed to harvest browser-stored credentials and session tokens from major Windows browsers (Chrome, Edge, Brave, Opera family, Vivaldi, and Firefox). It bypasses App-Bound Encryption in Chromium-based browsers by spawning a headless Chromium process, injecting a DLL via Early Bird APC to call the IElevator COM interface, and then decrypts on-disk SQLite and JSON stores (DPAPI/NSS handling for other browsers), outputting structured JSON while employing runtime evasion techniques to reduce EDR detection—making it a high-risk capability for credential theft and cloud account takeover in assumed-breach scenarios.