4f: The File Format Fuzzing Framework

DumpBrowserSecrets is a Windows post-exploitation credential-harvesting tool that extracts saved credentials, session cookies, OAuth refresh tokens, credit card data, autofill entries and browsing history from Chromium-based (Chrome, Edge, Brave, Opera, Vivaldi) and Firefox browsers. It implements a bypass of Chrome's App-Bound Encryption by spawning a headless Chromium process and injecting a DLL via Early Bird APC to use the IElevator COM interface to decrypt keys, supports DPAPI and NSS decryption for other browsers, includes multiple operational evasion techniques, and outputs structured JSON for red-team assessment and credential replay.