Passive Analysis Tool For HTTP Web Applications

DumpBrowserSecrets is a Windows post‑exploitation tool that harvests browser-stored secrets (saved credentials, session cookies, OAuth refresh tokens, credit cards, autofill, history) from Chrome, Edge, Brave, Opera/Opera GX, Vivaldi, and Firefox. It bypasses Chrome's App‑Bound Encryption by spawning a headless Chromium process and injecting a DLL that uses the IElevator COM interface to decrypt the app_bound_encrypted_key; for DPAPI- and NSS-protected browsers it retrieves or decrypts keys accordingly. The tool includes operational evasion features (string obfuscation, API hashing, PPID/argument spoofing, handle duplication), outputs structured JSON, is distributed as precompiled binaries on GitHub, and the report provides detection indicators and mitigation recommendations.