BASE 1.2.6 Released (Basic Analysis & Security Engine)

DumpBrowserSecrets is a post‑exploitation credential-harvesting tool that targets Chromium- and Gecko-based browsers to extract saved passwords, session cookies, OAuth refresh tokens, credit card data, autofill entries and browsing history. It circumvents Chrome's App‑Bound Encryption by spawning a headless Chromium process and injecting a DLL to use the IElevator COM interface, handles DPAPI for Opera/Vivaldi and NSS for Firefox, and includes operational evasion techniques; the report covers usage, attack scenarios, detection opportunities, and mitigations.