The Top 10 Most Common Passwords

DumpBrowserSecrets is a publicly documented post‑exploitation tool designed to extract browser‑stored secrets (saved passwords, session cookies, OAuth refresh tokens, credit cards, autofill data, history, bookmarks) from Chromium‑based browsers and Firefox on Windows. It bypasses Chrome's App‑Bound Encryption (Chrome 127+) by spawning a headless Chromium process and injecting a DLL to call the IElevator COM interface, retrieves DPAPI/NSS keys where appropriate, and includes operational evasion features (string obfuscation, API hashing, PPID/argument spoofing, file‑handle duplication). The report covers usage, supported browsers, example attack scenarios (rapid credential extraction enabling cloud account takeover and lateral movement), detection opportunities (suspicious process injection, IElevator calls, non‑browser reads of browser SQLite DBs), and mitigation suggestions such as using standalone credential managers.