Win GFI T-shirts, Mugs and Keychains along with your iPod or PSP!

DumpBrowserSecrets is a publicly available post‑exploitation tool that harvests browser‑stored secrets (passwords, cookies, OAuth refresh tokens, credit cards, autofill, history) from Chrome, Edge, Brave, Opera variants, Vivaldi, and Firefox. It bypasses Chrome's App‑Bound Encryption by spawning a headless Chromium process and injecting a DLL to use the IElevator COM interface for key decryption (DPAPI and NSS methods are used for other browsers), includes operational evasion techniques (string obfuscation, API hashing, PPID/argument spoofing, handle duplication), and is intended for red‑team/assumed‑breach testing while also representing a credible tool for malicious credential theft; the report covers capabilities, usage, attack scenarios, and detection/mitigation recommendations.