SIFT Web Services Security Testing Framework

DumpBrowserSecrets is a publicly available Windows post-exploitation tool that harvests credentials and session tokens from major Chromium- and Gecko-based browsers by using DLL injection (Early Bird APC) and the IElevator COM interface to bypass Chrome App-Bound Encryption, plus DPAPI and NSS handling for other browsers; it outputs structured JSON and includes operational evasion features, making it useful for red teams and a realistic risk if abused by threat actors.