Web Application Security Consortium (WASC) 2008 Statistics Published

DumpBrowserSecrets is a publicly documented post-exploitation credential-harvesting tool that targets Chromium- and Gecko-based browsers on Windows to extract saved passwords, session cookies, OAuth refresh tokens, credit card and autofill data by decrypting App-Bound Encryption keys via an injected DLL (using Early Bird APC and the IElevator COM interface) or by accessing DPAPI/NSS-protected keys; it includes operational evasion features and outputs structured JSON for red-team or adversary use.