Who is Gouki?

DumpBrowserSecrets is a post-exploitation tool that harvests credentials and session tokens from major Windows browsers (Chrome/Edge/Brave via App‑Bound Encryption bypass, Opera/Vivaldi via DPAPI, and Firefox via NSS), using techniques such as headless Chromium spawning, Early Bird APC DLL injection, and IElevator COM access to decrypt protected keys. The tool outputs structured JSON and includes operational evasion features (string obfuscation, API hashing, PPID/argument spoofing, file-handle duplication), enabling rapid credential exfiltration that can facilitate lateral movement and SaaS/cloud account takeover; the report also provides detection and mitigation recommendations.