Vista more insecure than XP

DumpBrowserSecrets is a publicly available Windows post-exploitation tool that harvests credentials and session data from major browsers (Chrome, Edge, Brave, Opera, Opera GX, Vivaldi, and Firefox). It implements an App-Bound Encryption bypass for Chromium-based browsers by spawning a headless process and injecting a DLL via Early Bird APC to call the IElevator COM interface, retrieves DPAPI and NSS-protected secrets, includes operational evasion features (string obfuscation, API hashing, PPID/argument spoofing, file-handle duplication), outputs structured JSON, and is positioned for red-team assumed-breach testing while representing a significant abuse risk if adopted by malicious actors.