Passive Web Application Vulnerability Scanner

DumpBrowserSecrets is a Windows post‑exploitation credential‑harvesting tool that targets Chromium‑based and Firefox browsers to extract saved passwords, session cookies, OAuth tokens, credit card data, and browsing history; it bypasses Chrome's App‑Bound Encryption by injecting a DLL into a spawned headless Chromium process to use the IElevator COM interface, supports DPAPI and NSS decryption for other browsers, and includes multiple operational evasion techniques—making it a high‑risk capability for lateral movement and cloud account takeover if misused, while also being positioned for red‑team use and endpoint control testing.