Web Automation & Application Security Testing Tool

DumpBrowserSecrets is a publicly available post‑exploitation credential harvesting tool that targets major browsers (Chrome, Edge, Brave, Opera variants, Vivaldi, and Firefox) to extract saved credentials, session cookies, OAuth refresh tokens, credit card data, autofill entries and history. It bypasses Chrome's App-Bound Encryption by spawning a headless Chromium process and injecting a DLL via Early Bird APC to call the IElevator COM interface, handles DPAPI and NSS for other browsers, includes operational evasion features (string obfuscation, API hashing, PPID/argument spoofing, file handle duplication), outputs structured JSON for red-team use, and can enable rapid cloud account takeover and lateral movement if used by adversaries.