Passive Open-Source Network Traffic Analyzer

DumpBrowserSecrets is a Windows post-exploitation tool that harvests browser-stored secrets (saved logins, cookies, OAuth refresh tokens, credit cards, autofill, history, bookmarks) from major Chromium-based and Firefox browsers. It bypasses Chrome's App-Bound Encryption by spawning a headless Chromium process and injecting a DLL via Early Bird APC to use the IElevator COM interface to decrypt keys, and uses DPAPI/NSS handling for other browsers; the tool includes evasion features and outputs structured JSON for red-team use, with guidance on detection and mitigation.