Microsoft SQL Server (MS-SQL) SQL Injection Vulnerability Tool

**DumpBrowserSecrets** is a post‑exploitation browser credential‑harvesting tool that targets Chromium‑based and Gecko-based browsers, bypassing Chrome's App‑Bound Encryption by injecting a DLL into a spawned headless Chromium process to leverage the IElevator COM interface; it also handles DPAPI and NSS protected stores and writes extracted secrets as structured JSON. The report covers supported browsers, extracted data types (cookies, logins, OAuth tokens, credit cards, autofill, history), evasion techniques (string obfuscation, API hashing, PPID/argument spoofing, Early Bird APC injection, custom SQLite parser), attack scenarios, and detection/mitigation guidance.