Car Immobilisers Using Weak Encryption Schemes

DumpBrowserSecrets is a Windows post-exploitation tool that harvests browser-stored credentials (saved passwords, session cookies, OAuth refresh tokens, credit cards, autofill data, and browsing history) from Chromium-based browsers and Firefox. It achieves this by spawning a headless Chromium process and injecting a DLL via Early Bird APC to use the IElevator COM interface to decrypt App-Bound Encryption keys (Chrome/Edge/Brave), retrieves DPAPI keys for Opera-family browsers, and uses NSS decryption for Firefox; the tool includes evasion features (string obfuscation, API hashing, PPID/argument spoofing, custom SQLite parser) and outputs structured JSON for red-team use, plus guidance for detection and mitigation.