Serious Exploit in Windows Media Player (WMP)

DumpBrowserSecrets is a post‑exploitation credential‑harvesting tool for Windows that extracts browser-stored secrets (passwords, cookies, OAuth refresh tokens, credit cards, autofill data, history, bookmarks) from major Chromium-based browsers and Firefox. It bypasses Chrome's App‑Bound Encryption by spawning a headless Chromium process and injecting a DLL to use the IElevator COM interface, handles DPAPI and NSS decryption for other browsers, contains operational evasion features (string obfuscation, API hashing, PPID/argument spoofing, handle duplication), and is positioned for red-team testing while posing a significant risk if misused by threat actors.