Passive Web Application Security Audit Tool

**DumpBrowserSecrets** is a pre-compiled Windows post-exploitation tool that harvests browser-stored secrets (saved passwords, session cookies, OAuth refresh tokens, credit cards, autofill data, history, and bookmarks) from major Chromium-based browsers and Firefox; it bypasses Chrome's App-Bound Encryption by spawning a headless Chromium, injecting a DLL via Early Bird APC to call the IElevator COM interface, and includes DPAPI/NSS handling and multiple evasion features, producing structured JSON output for red-team use while the report also outlines detection opportunities and mitigations.