Web Server Auditing Tool (Scanner and File Fuzzer)

DumpBrowserSecrets is a publicly available post-exploitation tool that extracts browser-stored credentials and tokens from major browsers (Chrome, Edge, Brave, Opera variants, Vivaldi, and Firefox). It bypasses Chrome's App-Bound Encryption by spawning a headless Chromium process and injecting a DLL that uses the IElevator COM interface (via Early Bird APC injection) to obtain decryption keys, then parses and decrypts on-disk SQLite/JSON stores to produce structured JSON output; the report outlines evasion techniques, attack scenarios, detection opportunities, and mitigations.