Open Source Web Application Security Assessment Tool

DumpBrowserSecrets is a publicly available post‑exploitation tool that harvests browser‑stored secrets (saved logins, session cookies, OAuth refresh tokens, credit cards, autofill data, and history) from Chrome, Edge, Brave, Opera variants, Vivaldi, and Firefox. It implements an App‑Bound Encryption bypass for Chromium browsers by injecting a DLL into a headless Chromium process and using the IElevator COM interface to decrypt encryption keys, includes DPAPI and NSS handling for other browsers, and uses multiple evasion techniques; output is structured JSON for red team use but poses a high risk if abused.