SpikeSource Spike PHP Security Audit Tool

DumpBrowserSecrets is a post‑exploitation credential‑harvesting tool that extracts browser‑stored secrets (saved logins, session cookies, OAuth tokens, credit cards, autofill data, history and bookmarks) from Chrome, Edge, Brave, Opera/Opera GX, Vivaldi and Firefox. The tool uses DLL injection into a headless Chromium process to leverage the IElevator COM interface and decrypt App‑Bound Encryption keys (and DPAPI/NSS where applicable), includes multiple operational evasion features, outputs structured JSON for red‑team use, and is presented with detection and mitigation guidance.