Web Server & Application Vulnerability Scanner

DumpBrowserSecrets is a post‑exploitation credential‑harvesting tool that extracts browser‑stored secrets (passwords, session cookies, OAuth refresh tokens, credit cards, autofill, history, bookmarks) from major Chromium and Firefox browsers. It bypasses Chrome's App‑Bound Encryption by spawning a headless Chromium process and injecting a DLL to use the IElevator COM interface, includes DPAPI and NSS handling for other browsers, and implements several evasion techniques; the tool is positioned for red‑team/assumed‑breach testing and outputs structured JSON of recovered data.