SharpHose – Asynchronous Password Spraying Tool

DumpBrowserSecrets is a publicly documented post‑exploitation tool that harvests browser‑stored credentials and session tokens from Chrome, Edge, Brave, Opera variants, Vivaldi, and Firefox. It implements an App‑Bound Encryption bypass for Chromium-based browsers by injecting a DLL into a headless Chromium process (Early Bird APC + IElevator COM) to decrypt keys, supports DPAPI and NSS decryption where applicable, includes operational evasion features, outputs structured JSON, and is intended for red‑team/assumed‑breach use while also serving as a realistic test of enterprise endpoint controls.