Judas DNS – Nameserver DNS Poisoning Attack Tool

DumpBrowserSecrets is a publicly available post‑exploitation tool that harvests saved credentials, session cookies, OAuth refresh tokens, credit card data, autofill entries and browsing history from major browsers (Chrome, Edge, Brave, Opera variants, Vivaldi, and Firefox). It bypasses Chrome's App‑Bound Encryption by spawning a headless Chromium process and injecting a DLL via Early Bird APC to call the IElevator COM interface, retrieves DPAPI keys for some Chromium forks, and directly decrypts Firefox NSS logins; the tool includes multiple evasion features and writes structured JSON output for red‑team use and testing of endpoint defences.