Static Source Code Analysis For PHP Vulnerabilities

DumpBrowserSecrets is a public post‑exploitation credential‑harvesting tool targeting Chromium- and Gecko-based browsers to extract saved passwords, session cookies, OAuth tokens, credit card data, autofill entries and browsing history. It implements an App‑Bound Encryption bypass for Chrome/Edge/Brave via IElevator COM when spawning a headless Chromium process with Early Bird APC DLL injection, handles DPAPI-based browsers (Opera/Vivaldi) and NSS-based Firefox decryption, and includes evasion techniques and operational guidance, with JSON output for red-team or adversary use.