OSSEC – Open Source Host-Based Intrusion Detection for Linux, Windows and Unix Systems

DumpBrowserSecrets is a precompiled Windows post‑exploitation tool that harvests browser-stored secrets (saved passwords, session cookies, OAuth refresh tokens, credit cards, autofill data and history) from Chrome/Edge/Brave (via an App‑Bound Encryption bypass using IElevator and DLL injection), Opera/Opera GX/Vivaldi (DPAPI), and Firefox (NSS). The report describes the tool's architecture, usage, evasion features, an example attack scenario, and detection/mitigation recommendations for enterprise defenders.