Open Source Next Generation Intrusion Detection and Prevention Engine

DumpBrowserSecrets is a Windows post-exploitation credential-harvesting tool that extracts saved passwords, session cookies, OAuth refresh tokens, credit card numbers, autofill data and browsing history from major Chromium-based and Firefox browsers. The report documents its two-component design (an executable and an injected DLL), a working bypass for Chrome's App-Bound Encryption using IElevator via Early Bird APC injection, DPAPI and NSS decryption paths for other browsers, numerous evasion techniques, example attack scenarios for red teams, and recommended detection and mitigation approaches.