Free & Open-Source Data Loss Prevention (DLP) Tool

DumpBrowserSecrets is a Windows post-exploitation tool that harvests browser-stored secrets (saved passwords, session cookies, OAuth refresh tokens, credit cards, autofill entries, history, bookmarks) from major browsers. It implements an App-Bound Encryption bypass for Chrome/Brave/Edge by spawning a headless Chromium process and injecting a DLL to use the IElevator COM interface, handles DPAPI-based browsers (Opera, Vivaldi) and NSS-based Firefox logins, includes evasion techniques (string obfuscation, API hashing, PPID/argument spoofing, Early Bird APC injection), outputs structured JSON, and is intended for red-team/assumed-breach testing but could be abused by adversaries to enable cloud account takeover and rapid lateral movement.