Source Code Hosting Service Code Spaces Deleted By Hacker

DumpBrowserSecrets is a post-exploitation credential-harvesting tool that extracts saved passwords, session cookies, OAuth refresh tokens, credit card numbers, autofill data and browsing history from Chromium-based browsers (Chrome, Edge, Brave, Opera variants, Vivaldi) and Firefox. It bypasses App‑Bound Encryption in modern Chromium builds by spawning a headless browser and injecting a DLL to use the IElevator COM interface to decrypt keys, supports DPAPI and NSS decryption where applicable, includes multiple EDR-evasion features, outputs structured JSON, and is intended for red-team/assumed-breach exercises but can be abused for cloud account takeover and lateral movement.