Quasar RAT – Windows Remote Administration Tool

DumpBrowserSecrets is a publicly released post‑exploitation tool designed to harvest browser‑stored credentials and session tokens from major browsers (Chrome/Edge/Brave via App‑Bound Encryption bypass, Opera/Vivaldi via DPAPI, and Firefox via NSS). It uses headless Chromium process spawning plus Early Bird APC DLL injection and the IElevator COM interface to decrypt app‑bound keys, includes multiple evasion techniques (string obfuscation, API hashing, PPID/argument spoofing, handle duplication, custom SQLite parser), outputs structured JSON, and is intended for red team/assumed‑breach testing but represents a high‑impact capability for credential theft and cloud session takeover if misused.