A Geolocation Information Aggregator AKA OSINT Tool

DumpBrowserSecrets is a publicly described post-exploitation credential-harvesting tool designed to extract saved passwords, session cookies, OAuth refresh tokens, credit card data, autofill entries, and browsing history from Chromium-based browsers (including Chrome/Edge/Brave via an App‑Bound Encryption bypass) and Firefox (via NSS decryption). The tool spawns a headless Chromium, injects a DLL using Early Bird APC to call the IElevator COM interface and recover the app_bound_encrypted_key, includes DPAPI and NSS handling for other browsers, implements multiple runtime evasion techniques (string obfuscation, API hashing, PPID/argument spoofing, handle duplication, custom SQLite parser), outputs structured JSON, and is positioned for red-team/assumed-breach use while also representing a clear infostealer capability that can enable SaaS account takeover and lateral movement.