Open Source Host-Based Intrusion Detection System (HIDS)

DumpBrowserSecrets is a publicly documented post-exploitation tool that extracts browser-stored secrets (cookies, saved logins, OAuth refresh tokens, credit cards, autofill data and history) from major Chromium-based and Firefox browsers. It implements an App-Bound Encryption bypass for Chrome/Edge/Brave by injecting a DLL into a headless Chromium process to use the IElevator COM interface to decrypt keys, supports DPAPI and NSS decryption for other browsers, includes several EDR-evasion features, and outputs structured JSON suitable for red team or offensive use.