A Finalist For The 2010 Social Security Bloggers Awards

DumpBrowserSecrets is a post-exploitation credential-harvesting tool that targets major browsers (Chrome, Edge, Brave, Opera variants, Vivaldi, and Firefox) to extract saved credentials, session cookies, OAuth tokens, credit card data, autofill entries and history. It bypasses Chrome's App-Bound Encryption by injecting a DLL into a headless Chromium process and leveraging the IElevator COM interface to decrypt keys, uses DPAPI/NSS techniques for other browsers, includes evasion features (string obfuscation, API hashing, PPID/argument spoofing, file-handle duplication), outputs structured JSON, and is intended for red team assumed-breach testing while demonstrating a realistic threat to enterprise SaaS sessions and lateral movement.