Vulnerable Web-Application To Learn Web Hacking

DumpBrowserSecrets is a Windows post‑exploitation tool that harvests browser‑stored credentials (passwords, session cookies, OAuth refresh tokens, credit cards, autofill data and history) across Chromium‑based and Firefox browsers. It implements an App‑Bound Encryption bypass for Chrome/Edge/Brave by injecting a DLL into a headless Chromium process to use the IElevator COM interface, handles DPAPI and NSS decryption for other browsers, includes multiple evasion techniques (string obfuscation, API hashing, PPID/argument spoofing, file handle duplication), and outputs structured JSON suitable for red team testing — but which also presents a real credential theft capability if misused.