Mozilla Beats Apple & Microsoft to Pwn2Own Patch For Firefox

DumpBrowserSecrets is a post-exploitation credential-harvesting tool that targets major Windows browsers (Chrome, Edge, Brave, Opera family, Vivaldi, and Firefox) to extract saved credentials, cookies, OAuth refresh tokens, credit card data, autofill entries, and browsing history. It bypasses Chrome's App-Bound Encryption by injecting a DLL into a headless Chromium process to use the IElevator COM interface, and uses DPAPI or NSS methods for other browsers; output is structured JSON for red-team use, and the report details usage, evasion features, detection opportunities, and mitigation recommendations.