Bug Bounties Reaching $500,000 For iOS Exploits

DumpBrowserSecrets is a post‑exploitation credential‑harvesting tool that extracts passwords, session cookies, OAuth tokens, credit card data, autofill entries and history from Chrome, Edge, Brave, Opera (and variants), Vivaldi, and Firefox. It implements an App‑Bound Encryption bypass for Chromium (spawning a headless browser and using Early Bird APC DLL injection to call the IElevator COM interface), handles DPAPI and NSS decryption models, includes operational evasion features (string obfuscation, API hashing, PPID/argument spoofing, handle duplication), and outputs structured JSON for red‑team use — posing a high risk for lateral movement and cloud account takeover if misused.