123456 Still The Most Common Password For 2015

DumpBrowserSecrets is a publicly available post-exploitation tool that extracts browser-stored credentials (passwords, session cookies, OAuth tokens, credit cards, autofill, history) from major Chromium-based browsers and Firefox. It bypasses Chrome's App-Bound Encryption by spawning a headless Chromium process and injecting a DLL to call the IElevator COM interface, uses DPAPI/NSS handling for other browsers, and includes evasion features (string obfuscation, API hashing, PPID/argument spoofing, file-handle duplication). The report evaluates attack scenarios, red-team relevance, detection opportunities (injection, headless browser instantiation, reads of browser SQLite DBs, IElevator calls) and mitigation recommendations.