WordPress Critical Zero-Day Vulnerability Fixed In A Hurry

DumpBrowserSecrets is a Windows post-exploitation tool that extracts browser-stored credentials and session data (cookies, saved logins, OAuth refresh tokens, credit cards, autofill, history, bookmarks) from Chromium-based browsers (Chrome, Edge, Brave, Opera variants, Vivaldi) and Firefox. It implements an App-Bound Encryption bypass for Chrome 127+ by spawning a headless Chromium process and injecting a DLL to call the IElevator COM interface, retrieves DPAPI/NSS keys as needed, includes multiple evasion techniques (string obfuscation, API hashing, PPID/argument spoofing, file-handle duplication), outputs structured JSON, and is positioned for red-team or adversary use to demonstrate credential exposure and potential cloud account takeover.