CredMaster – Anonymous AWS‑Backed Password Spraying Toolkit

DumpBrowserSecrets is a post‑exploitation credential‑harvesting tool that targets Chromium‑based and Gecko‑based browsers on Windows, using a headless Chromium + injected DLL to bypass Chrome's App‑Bound Encryption via the IElevator COM interface (and DPAPI/NSS handling for other browsers) to extract cookies, saved passwords, OAuth refresh tokens, credit cards, autofill data, and history; the report describes its components, operational evasion techniques, extraction output, usage examples, detection opportunities, and mitigation advice.