AV Firms Split Over Defcon Contest

DumpBrowserSecrets is a post‑exploitation credential‑harvesting tool that extracts browser‑stored secrets (saved logins, session cookies, OAuth refresh tokens, credit cards, autofill and history) from major Chromium‑based browsers and Firefox by spawning a headless browser and using DLL injection to obtain decryption keys (bypassing Chrome’s App‑Bound Encryption) or retrieving DPAPI/NSS keys; the report details operation, supported browsers, evasion techniques, example attack scenarios, detection opportunities and mitigation guidance.