The Next 50 Years of Computer Security

DumpBrowserSecrets is a publicly documented post‑exploitation tool that harvests browser-stored secrets (passwords, cookies, OAuth tokens, credit cards, autofill, history) across major Chromium- and Gecko-based browsers. It bypasses Chrome's App‑Bound Encryption by spawning a headless Chromium process and injecting a DLL (using Early Bird APC) to use the IElevator COM interface to decrypt keys, supports DPAPI and NSS decryption for other browsers, includes evasion features (string obfuscation, API hashing, PPID/argument spoofing, handle duplication), outputs structured JSON, and is positioned for red-team/assumed-breach testing while posing clear risk if misused by adversaries.