Security Compass Web Application Analysis Tool

DumpBrowserSecrets is a Windows post‑exploitation tool that harvests browser-stored secrets (saved logins, session cookies, OAuth refresh tokens, credit cards, autofill, history, bookmarks) from Chromium- and Gecko-based browsers. The tool bypasses Chrome's App‑Bound Encryption by injecting a DLL into a spawned headless Chromium process to use the IElevator COM interface, extracts DPAPI and NSS secrets where applicable, includes operational evasion features (string obfuscation, API hashing, PPID/argument spoofing, handle duplication), and outputs structured JSON; the report covers usage, attack scenarios, red-team relevance, and detection/mitigation advice.