IE Address Bar Spoofing

DumpBrowserSecrets is a publicly documented post-exploitation tool that harvests browser-stored credentials and session tokens across major Chromium-based browsers and Firefox. It bypasses Chrome's App-Bound Encryption by spawning a headless Chromium process and injecting a DLL to use the IElevator COM interface, retrieves DPAPI or NSS-protected keys as appropriate, and decrypts SQLite/JSON-stored secrets (cookies, saved logins, OAuth refresh tokens, credit cards, autofill, history, bookmarks). The tool includes operational evasion features (string obfuscation, API hashing, PPID/argument spoofing, file-handle duplication, custom SQLite parsing), outputs structured JSON, and is intended for red-team/assumed-breach testing but represents a high-risk capability if abused by adversaries.