Free Manual Pen-Testing Tools

DumpBrowserSecrets is a publicly released post-exploitation tool that harvests credentials and session artifacts from major browsers (Chrome, Edge, Brave, Opera variants, Vivaldi, and Firefox). It bypasses Chrome's App-Bound Encryption by injecting a DLL into a headless Chromium process to access the IElevator COM interface, retrieves DPAPI/NSS keys where applicable, and writes structured JSON containing cookies, OAuth refresh tokens, saved logins, autofill data, credit cards, and browsing history; the report covers operational evasion, detection signals, and mitigation recommendations.