eEye Binary Diffing Suite (EBDS)

DumpBrowserSecrets is a post‑exploitation credential‑harvesting tool that targets Chromium‑based and Firefox browsers on Windows, extracting saved passwords, session cookies, OAuth refresh tokens, credit cards, autofill data, and history. It bypasses Chrome's App‑Bound Encryption by spawning a headless Chromium process and injecting a DLL to call the IElevator COM interface (Early Bird APC injection), supports DPAPI and NSS decryption for other browsers, includes multiple evasion features, and is intended for red‑team assumed‑breach testing but represents a high‑impact capability if used by adversaries.