Browser dump (chrome,firefox) implemented

documentation-payload/Cazalla/commands.md

@@ -955,6 +955,65 @@ Path: C:\Program Files\Google\Chrome\Application\chrome.exe
 
 ---
 
+### `browser_dump` - Dump Browser Credentials
+
+Extract cookies, saved passwords, and bookmarks from web browsers.
+
+**Syntax:**
+```
+browser_dump <browser>
+```
+
+**Parameters:**
+- `browser` (required): Browser to dump. Must be one of: `chrome`, `firefox`
+
+**Examples:**
+```
+browser_dump chrome
+browser_dump firefox
+```
+
+**Features:**
+- Supports Chrome and Firefox
+- Extracts cookies (display only), saved passwords, and bookmarks
+- Automatically decrypts browser-protected credentials
+- Reports saved passwords to Mythic's credential store (cookies are NOT stored)
+- Smart cookie filtering: Only shows session cookies useful for authentication
+- HIGH OPSEC RISK: Browser credential access is heavily monitored
+
+**Output:**
+```
+============================================
+||               Cookies                  ||
+============================================
+
+- URL: example.com
+- Cookie: session_id=abc123...
+
+============================================
+||              Saved logins              ||
+============================================
+
+- URL: https://example.com
+- Username: user@example.com
+- Password: mypassword123
+```
+
+**Credential Reporting:**
+- **Passwords**: Automatically saved to Mythic's credential store
+- **Cookies**: Displayed in output but NOT stored as credentials
+
+**OPSEC Considerations:**
+- HIGH DETECTION RISK - Browser credential access is heavily monitored
+- EDR/XDR solutions have specific detection rules
+- File access to browser databases triggers alerts
+- Detection is likely within minutes
+- Always requires approval from another operator
+
+**Related:** [Browser Information Command](commands/browser_info.md), [Detailed Documentation](commands/browser_dump.md)
+
+---
+
 ## Control Commands
 
 ### `sleep` - Adjust Beacon Interval