Web Services Fuzzing Tool for HTTP and SOAP

DumpBrowserSecrets is a Windows post-exploitation tool that harvests browser-stored secrets (saved logins, session cookies, OAuth tokens, credit cards, autofill, history) from Chromium-based browsers and Firefox. The tool implements an App-Bound Encryption bypass for Chrome/Brave/Edge by spawning a headless Chromium process and injecting a DLL via Early Bird APC to use the IElevator COM interface, and handles DPAPI/NSS models for other browsers. The report covers capabilities, evasion techniques (string obfuscation, API hashing, PPID/argument spoofing, handle duplication), usage examples, detection opportunities (unexpected process injection, IElevator calls, reads of browser SQLite DBs), and mitigation recommendations.