Web Application Security Testing & Attack Platform

DumpBrowserSecrets is a post‑exploitation credential‑harvesting tool that extracts saved passwords, session cookies, OAuth refresh tokens, credit card numbers, autofill entries and browsing history from major Chromium‑based browsers and Firefox. It bypasses Chrome's App‑Bound Encryption by spawning a headless Chromium process and injecting a DLL that uses the IElevator COM interface to decrypt keys, includes evasion features (string obfuscation, API hashing, PPID/argument spoofing, file-handle duplication), outputs structured JSON, and is positioned for red‑team use but poses a clear risk if used by attackers; detection guidance emphasizes monitoring IElevator calls, anomalous headless browser processes, and non‑browser reads of browser SQLite files.