Pinterest Bug Bounty Program Starts Paying

DumpBrowserSecrets is a publicly available post-exploitation tool that extracts browser-stored credentials and session tokens from major Chromium-based browsers and Firefox by using techniques such as spawning a headless Chromium process, Early Bird APC DLL injection, and leveraging the IElevator COM interface to bypass App-Bound Encryption (Chrome 127+). The report details supported browsers, extracted data types (cookies, saved logins, OAuth refresh tokens, credit cards, autofill, history), operational evasion features, usage examples, detection opportunities, and its application for red teams to assess the credential exposure risk on compromised developer endpoints.