AgentSmith HIDS – Host Based Intrusion Detection

DumpBrowserSecrets is a Windows post-exploitation tool that harvests browser-stored credentials and tokens from major browsers (Chrome, Edge, Brave, Opera variants, Vivaldi, and Firefox). It implements an App-Bound Encryption bypass by injecting a DLL into a headless Chromium process to use the IElevator COM interface, supports DPAPI and NSS decryption for other browsers, includes multiple operational evasion techniques, and outputs structured JSON for red-team or adversary use—enabling rapid credential and session token exfiltration that can lead to lateral movement and cloud account takeover.