Mozilla Increases Security Bug Bounty To $3000

DumpBrowserSecrets is a publicly documented post‑exploitation tool that harvests browser‑stored secrets (saved passwords, cookies, OAuth refresh tokens, credit cards, autofill and history) from major Chromium and Firefox browsers. It bypasses Chrome’s App‑Bound Encryption by injecting a DLL into a spawned headless Chromium process (Early Bird APC + IElevator COM), uses DPAPI/NSS for other browsers, includes multiple evasion techniques, outputs structured JSON, and is intended for red‑team assumed‑breach testing but poses a significant credential‑theft risk if misused.