16 New Exploits, 22 Modules & 11 Meterpreter Scripts

DumpBrowserSecrets is a publicly documented post-exploitation tool for Windows that harvests browser-stored credentials and session tokens from major Chromium-based browsers (Chrome, Edge, Brave, Opera variants, Vivaldi) and Firefox. It bypasses App-Bound Encryption in modern Chromium builds by spawning a headless browser and injecting a DLL to leverage the IElevator COM interface, handles DPAPI and NSS decryption models, includes evasion techniques (string obfuscation, API hashing, PPID/argument spoofing, file-handle duplication), and outputs structured JSON suitable for red team validation of credential exposure and cloud account takeover risk.