UBoat – Proof Of Concept PoC HTTP Botnet Project

DumpBrowserSecrets is a publicly available post-exploitation tool that extracts saved passwords, session cookies, OAuth refresh tokens, credit card data, autofill entries and browsing history from major browsers (Chrome/Edge/Brave via App‑Bound Encryption bypass, Opera/Vivaldi via DPAPI, and Firefox via NSS). The report describes its architecture (an executable plus a DLL that is injected into a headless Chromium process to use the IElevator COM interface), evasion techniques (string obfuscation, API hashing, PPID/argument spoofing, handle duplication), typical attack scenarios, detection signals, and mitigation recommendations for enterprise environments.