Free & Open Source Browser-Based Security Framework

DumpBrowserSecrets is a publicly available post‑exploitation tool designed to harvest credentials and session tokens from major browsers (Chrome, Edge, Brave, Opera family, Vivaldi, and Firefox). It bypasses Chrome's App‑Bound Encryption by injecting a DLL into a headless Chromium process to use the IElevator COM interface, handles DPAPI and NSS for other browsers, includes evasion features to resist EDR detection, and outputs structured JSON for rapid credential reuse—making it a high-risk tool for account takeover and lateral movement in enterprise environments.