Information Sharing For Security Assessments

DumpBrowserSecrets is a post-exploitation credential-harvesting tool that targets Chrome, Edge, Brave, Opera, Opera GX, Vivaldi and Firefox to extract saved credentials, cookies, OAuth tokens, credit cards, autofill data and history. It bypasses Chrome's App-Bound Encryption by spawning a headless Chromium process and performing Early Bird APC DLL injection to call the IElevator COM interface, handles DPAPI and NSS decryption for other browsers, includes evasion features (string obfuscation, API hashing, PPID/argument spoofing, handle duplication), and outputs structured JSON; the report also provides detection opportunities and mitigation advice.