Tracking Users Via the Browser Cache

DumpBrowserSecrets is a post-exploitation credential-harvesting tool from Maldev Academy that extracts saved passwords, session cookies, OAuth refresh tokens, credit card data, autofill entries, and browsing history from Chromium-based (Chrome, Edge, Brave, Opera variants, Vivaldi) and Firefox browsers; it implements an App-Bound Encryption bypass for Chrome 127+ by injecting a DLL into a headless Chromium process to use the IElevator COM interface and returns decrypted keys for local decryption, and includes multiple operational evasion features and detection/mitigation guidance.