Web Application Security Add-on For Firefox

DumpBrowserSecrets is a publicly available post-exploitation tool that harvests browser-stored credentials and session tokens across Chromium-based browsers and Firefox by spawning headless browser processes, injecting a DLL to leverage the IElevator COM interface (bypassing Chrome's App-Bound Encryption), and parsing/decrypting on-disk browser databases; it outputs structured JSON, includes operational evasion features, and is intended for red-team or assumed-breach testing but can enable cloud account takeover and lateral movement if misused.