Visiting The States? Have Your Passwords Ready

DumpBrowserSecrets is a Windows post-exploitation tool that harvests browser-stored credentials and session tokens from major Chromium-based and Firefox browsers. It bypasses Chrome's App-Bound Encryption by spawning a headless Chromium process and injecting a DLL to use the IElevator COM interface to decrypt keys, uses DPAPI/NSS handling for other browsers, and includes multiple operational evasion techniques; the report details extraction outputs, usage, detection opportunities, and mitigations.