Windows_EndPoint_Audit – Endpoint Security Auditing Toolkit

DumpBrowserSecrets is a post-exploitation credential-harvesting tool that extracts saved passwords, session cookies, OAuth refresh tokens, credit card data, autofill entries, and browsing history from major browsers (Chrome, Edge, Brave, Opera variants, Vivaldi, and Firefox). It implements an App-Bound Encryption bypass for Chromium-based browsers by spawning a headless Chromium process and injecting a DLL to use the IElevator COM interface, and includes multiple operational evasion features; the report details usage, extracted data, attack scenarios, detection opportunities, and mitigation recommendations.