Database Password Cracker & Security Audit Tool For MS-SQL & MySQL

DumpBrowserSecrets is a post‑exploitation credential‑harvesting tool that extracts saved passwords, session cookies, OAuth refresh tokens, credit card data, autofill entries and browsing history from major Windows browsers. It implements an App‑Bound Encryption bypass for Chromium-based browsers by spawning a headless Chromium process and injecting a DLL (Early Bird APC) to call the IElevator COM interface, handles DPAPI for Opera/Vivaldi variants and NSS for Firefox, and includes operational evasion features (string obfuscation, API hashing, PPID/argument spoofing, file-lock bypass). The report documents usage, supported browsers and output, an attack scenario demonstrating rapid credential and token theft enabling cloud account takeover, and detection/mitigation recommendations for EDR and policy controls.