Google Desktop 3 Enterprise

DumpBrowserSecrets is a Windows post-exploitation tool that harvests browser-stored credentials and session tokens across Chromium-based and Firefox browsers by bypassing App‑Bound Encryption (via IElevator COM interaction after DLL injection into a headless Chromium) and using DPAPI/NSS decryption elsewhere. The report documents supported browsers, extracted data types (cookies, saved logins, OAuth refresh tokens, credit cards, autofill, history), operational evasion features, an attack scenario, and detection and mitigation recommendations for red-team and defensive testing.