Free, Open Source Network Access Control (NAC) System

DumpBrowserSecrets is a post-exploitation credential-harvesting tool that extracts passwords, session cookies, OAuth refresh tokens, credit card data, autofill entries, and browsing history from major browsers (Chrome, Edge, Brave, Opera variants, Vivaldi, and Firefox). It bypasses Chrome’s App-Bound Encryption by spawning a headless Chromium process and performing DLL injection (Early Bird APC) to use the IElevator COM interface to decrypt keys, includes DPAPI and NSS handling for other browsers, and incorporates evasion features (string obfuscation, API hashing, PPID/argument spoofing, handle duplication). The tool outputs structured JSON for red team use, and the report details detection opportunities and mitigations for enterprise environments.