Vulhub – Pre-Built Vulnerable Docker Environments For Learning To Hack

DumpBrowserSecrets is a publicly documented post-exploitation tool that harvests browser-stored secrets (saved logins, session cookies, OAuth tokens, credit cards, autofill and history) from major Chromium-based and Firefox browsers. It bypasses Chrome's App-Bound Encryption by spawning a headless Chromium instance and injecting a DLL via Early Bird APC to call the IElevator COM interface, supports DPAPI and NSS decryption for other browsers, includes multiple operational evasion techniques, and outputs structured JSON for red-team or attacker use; detection focuses on anomalous headless browser instantiation, process injection, and IElevator calls.