DataSurgeon – Extract Sensitive Information (PII) From Logs

DumpBrowserSecrets is a publicly available Windows post‑exploitation tool that harvests browser‑stored secrets (saved logins, session cookies, OAuth refresh tokens, credit cards, autofill data, history, and bookmarks) from Chromium‑based and Firefox browsers. It bypasses Chrome 127+ App‑Bound Encryption by spawning a headless Chromium process and injecting a DLL via Early Bird APC to call the IElevator COM interface, retrieves DPAPI or NSS keys for other browsers, and includes evasion techniques (string obfuscation, API hashing, PPID/argument spoofing) and operational guidance for red‑team testing and detection/mitigation recommendations for defenders.