In 2016 Your Wireless Keyboard Security Still SUCKS

DumpBrowserSecrets is a post-exploitation credential-harvesting tool that extracts saved logins, cookies, OAuth refresh tokens, credit card data, autofill entries, and browsing history from Chrome, Edge, Brave, Opera variants, Vivaldi, and Firefox; it bypasses Chrome's App-Bound Encryption by injecting a DLL into a headless Chromium process (using Early Bird APC) to call the IElevator COM interface and retrieve decryption keys, and uses DPAPI/NSS approaches for other browsers. The report covers implementation details, evasion techniques, attack scenarios, detection opportunities, and mitigation recommendations for defenders.