Hcon Security Testing Framework (HconSTF) v0.4

DumpBrowserSecrets is a publicly available Windows post-exploitation tool that harvests browser-stored credentials, cookies, OAuth refresh tokens, credit card data and history from Chromium-based and Firefox browsers by bypassing App-Bound Encryption (via spawning a headless Chromium process and DLL injection to call the IElevator COM interface) and DPAPI/NSS decryption where applicable; the report details capabilities, operational evasion features, supported browsers, extraction output, attack scenarios, and detection/mitigation recommendations.