Carders Scamming Spammers!

DumpBrowserSecrets is a post-exploitation credential-harvesting tool that extracts saved passwords, session cookies, OAuth refresh tokens, credit card data, autofill entries and browsing history from Chromium-based (Chrome, Edge, Brave, Opera variants, Vivaldi) and Firefox browsers. It implements an App-Bound Encryption bypass for Chrome 127+ by spawning a headless Chromium process and injecting a DLL to use the IElevator COM interface to decrypt keys, supports DPAPI and NSS decryption models, includes multiple evasion techniques, outputs structured JSON, and is positioned as a red-team utility for testing credential exposure and endpoint defenses.