AutoPwnKey – AV Evasion via Simulated User Interaction

DumpBrowserSecrets is a publicly documented post-exploitation tool that harvests browser-stored credentials (cookies, saved logins, OAuth tokens, credit cards, autofill data, history and bookmarks) across Chromium- and Gecko-based browsers by bypassing App-Bound Encryption via DLL injection into a headless Chromium process and handling DPAPI/NSS decryption; the report covers implementation details, evasion techniques, an attack scenario, detection indicators, and mitigation recommendations.