the Art of Virology 02h

DumpBrowserSecrets is a publicly documented post‑exploitation tool that extracts a wide range of browser-stored secrets (saved passwords, session cookies, OAuth refresh tokens, credit cards, autofill, history, bookmarks) from Chromium-based browsers and Firefox on Windows. It implements an App‑Bound Encryption bypass for Chrome/Edge/Brave by spawning a headless Chromium process and injecting a DLL via Early Bird APC to call the IElevator COM interface, and uses DPAPI/NSS methods for other browsers; the tool includes multiple evasion techniques, outputs structured JSON, and is intended for red-team use but is usable by attackers, with recommended detection and mitigation strategies provided.