Common Criteria Web Application Security Scoring (CCWAPSS) Released

DumpBrowserSecrets is a Windows post-exploitation tool that extracts browser-stored credentials and session data (cookies, saved logins, OAuth refresh tokens, credit cards, autofill and history) from Chrome, Edge, Brave, Opera-family browsers, Vivaldi, and Firefox. It implements an App‑Bound Encryption bypass for Chromium-based browsers by spawning a headless Chromium process and injecting a DLL (Early Bird APC) to use the IElevator COM interface to decrypt the app_bound_encrypted_key; it handles DPAPI and NSS for other browsers, includes evasion features (string obfuscation, API hashing, PPID/argument spoofing, file-lock bypass), outputs structured JSON, and is presented as a red-team tool for assumed-breach testing.