US Really Owns Your Data Now!

DumpBrowserSecrets is a published post‑exploitation credential‑harvesting tool that extracts saved passwords, session cookies, OAuth refresh tokens, credit card data and other browser-stored secrets from major Chromium-based browsers (including Chrome, Edge, Brave) and Firefox. The tool implements an App‑Bound Encryption bypass for Chrome 127+ by spawning a headless Chromium process and injecting a DLL via Early Bird APC to use the IElevator COM interface, supports DPAPI and NSS decryption for other browsers, includes multiple operational evasion features, and outputs structured JSON useful for red-team assessments — but also increases risk if adopted by malicious actors.