Platform Security Assessment Framework For Firmware Hacking

DumpBrowserSecrets is a public post‑exploitation tool that extracts browser‑stored secrets (saved logins, session cookies, OAuth refresh tokens, credit cards, autofill and history) from Chromium‑based browsers and Firefox. It implements an App‑Bound Encryption bypass for Chrome/Edge/Brave by spawning a headless Chromium process and injecting a DLL via Early Bird APC to call the IElevator COM interface, handles DPAPI and NSS decryption models, includes runtime evasion features, and outputs structured JSON for rapid account takeover and lateral movement; the report also outlines detection and mitigation opportunities.