Hacking with Ramzi

DumpBrowserSecrets is a public post‑exploitation tool that extracts browser‑stored secrets (saved credentials, session cookies, OAuth refresh tokens, credit cards, autofill and history) from major Chromium and Firefox browsers. It bypasses Chrome's App‑Bound Encryption by spawning a headless Chromium process and injecting a DLL (Early Bird APC) to call the IElevator COM interface, handles DPAPI and NSS models for other browsers, and includes multiple evasion techniques; the tool outputs structured JSON useful for lateral movement and cloud account takeover and is intended for red team/assumed‑breach testing.