Web Mail Auth Tool For Testing Web Mail Logins

DumpBrowserSecrets is a public, precompiled Windows post-exploitation tool that harvests browser-stored credentials and session data from Chromium-based and Firefox browsers. It bypasses Chrome’s App-Bound Encryption by spawning a headless Chromium process and injecting a DLL to call the IElevator COM interface, extracts DPAPI keys for some Chromium forks, and handles Firefox’s NSS-based storage directly; outputs are written as structured JSON. The report describes technical implementation, operational evasion techniques, example attack scenarios, detection vectors, and mitigation recommendations for enterprise environments.