July Commenter of the Month Competition Winner 2008!

DumpBrowserSecrets is a post-exploitation credential-harvesting tool that targets Chromium-based browsers (Chrome, Edge, Brave) by bypassing App-Bound Encryption via Early Bird APC DLL injection into a headless Chromium process and using the IElevator COM interface, and handles Opera/Vivaldi via DPAPI and Firefox via NSS. It extracts saved passwords, session cookies, OAuth refresh tokens, credit card data, autofill, history and bookmarks into JSON, includes operational evasion (string obfuscation, API hashing, PPID/argument spoofing, handle duplication), is distributed as precompiled binaries, and is positioned as a red-team tool for testing endpoint controls and SaaS credential exposure.