Tool For Finding Path Disclosure Vulnerabilities

DumpBrowserSecrets is a Windows post‑exploitation tool that harvests browser‑stored secrets (saved credentials, session cookies, OAuth refresh tokens, credit cards, autofill data, history, and bookmarks) from Chromium-based browsers and Firefox. It bypasses Chrome's App‑Bound Encryption by spawning a headless Chromium process and injecting a DLL to call the IElevator COM interface, handles DPAPI and NSS encryption models, includes evasion features (string obfuscation, API hashing, PPID/argument spoofing, handle duplication), and outputs structured JSON for red‑team or malicious use — enabling rapid cloud account takeover and lateral movement from compromised developer endpoints.