The Cryptographic Implementations Analysis Toolkit

DumpBrowserSecrets is a Windows post-exploitation tool that harvests browser-stored credentials (cookies, saved logins, OAuth refresh tokens, credit cards, autofill, history) from Chromium-based browsers and Firefox by bypassing App-Bound Encryption (via headless Chromium + IElevator COM DLL injection), DPAPI extraction, and NSS decryption; the report details its operation, evasion techniques, extraction output, usage examples, detection opportunities, and mitigation recommendations for red-team and defensive testing.