Collar Bomber Gets Owned By Word Metadata & USB Drive

DumpBrowserSecrets is a publicly available post-exploitation tool designed to harvest browser-stored credentials and session tokens from major Windows browsers (Chrome, Edge, Brave, Opera family, Vivaldi, and Firefox). It uses a compiled executable and a DLL to bypass App-Bound Encryption (via spawning a headless Chromium process and IElevator COM calls using Early Bird APC injection) or DPAPI/NSS decryption as appropriate, extracts cookies, saved logins, OAuth refresh tokens, credit cards, autofill data and history, includes evasion techniques to reduce EDR detection, and outputs structured JSON for red team or adversary use.