Academic Papers on Web Application Security

DumpBrowserSecrets is a publicly documented post-exploitation tool that harvests browser-stored credentials and session tokens from major Windows browsers (Chrome/Edge/Brave via App‑Bound Encryption bypass, Opera/Vivaldi via DPAPI, Firefox via NSS). The tool injects a DLL into a headless Chromium process to decrypt app_bound_encrypted_key using the IElevator COM interface, parses on-disk SQLite/JSON stores, and outputs structured JSON; it includes operational evasion features and guidance on detection and mitigation.