NASA Hacker Gary McKinnon Wins Right to Lords Appeal Extradition Hearing

DumpBrowserSecrets is a publicly available post‑exploitation credential‑harvesting tool that extracts saved passwords, session cookies, OAuth refresh tokens, credit card data, autofill entries and browsing history from major Chromium‑based browsers and Firefox. It implements an App‑Bound Encryption bypass for Chrome/Edge/Brave by spawning a headless Chromium process and injecting a DLL to call the IElevator COM interface, supports DPAPI and NSS decryption for other browsers, and includes evasion techniques (string obfuscation, API hashing, PPID/argument spoofing, handle duplication). The tool outputs structured JSON and is intended for red team/assumed‑breach testing but represents a high‑impact capability for credential theft and cloud account takeover if misused.