Sniff & Intercept Web Sessions With Android

DumpBrowserSecrets is a publicly documented post‑exploitation tool that harvests browser-stored credentials and session artifacts (cookies, saved logins, OAuth refresh tokens, credit cards, autofill, history) from major Chromium- and Firefox-based browsers. It includes a DLL injection technique (Early Bird APC) to leverage the IElevator COM interface and bypass Chrome's App‑Bound Encryption, handles DPAPI and NSS decryption for other browsers, implements several evasion techniques for EDR, and outputs structured JSON for red team or attacker use—enabling rapid account takeover and lateral movement from a compromised Windows host.