Industrial Control Systems Safe? I Think Not

DumpBrowserSecrets is a Windows post‑exploitation credential-harvesting tool that extracts browser-stored secrets (passwords, cookies, OAuth tokens, credit cards, autofill data, history, bookmarks) from major Chromium-based and Firefox browsers. It implements an App‑Bound Encryption bypass for Chrome/Edge/Brave by injecting a DLL into a headless Chromium process to call the IElevator COM interface, handles DPAPI and NSS variants for other browsers, includes operational evasion techniques (string obfuscation, API hashing, PPID/argument spoofing, handle duplication, custom SQLite parser), and outputs structured JSON to facilitate session replay and credential validation — making it a high-risk tool for lateral movement and cloud account takeover unless detected or mitigated.