WabiSabiLabi Pimping ClamAV Vulnerability & Exploit

DumpBrowserSecrets is a publicly available post‑exploitation credential‑harvesting tool that extracts browser‑stored secrets (passwords, cookies, OAuth tokens, credit cards, autofill, history, bookmarks) from Chromium‑based and Firefox browsers; it bypasses Chrome's App‑Bound Encryption by injecting a DLL into a headless Chromium process and using the IElevator COM interface, handles DPAPI and NSS decryption for other browsers, and includes operational evasion features to reduce EDR detection, producing structured JSON output for use in lateral movement and cloud account takeover scenarios.