Wazuh – Open Source Security Platform for Threat Detection, Visibility & Compliance

DumpBrowserSecrets is a public post-exploitation tool that harvests browser-stored credentials and session artifacts across Chromium- and Gecko-based browsers on Windows. It implements an App‑Bound Encryption bypass for modern Chromium builds by spawning a headless browser and injecting a DLL via Early Bird APC to call the IElevator COM interface, plus DPAPI and NSS handling for other browsers; outputs structured JSON and includes evasion techniques making it relevant for red teams and threat actors testing or abusing browser credential surfaces.