October Commenter of the Month Competition Winner!

DumpBrowserSecrets is a publicly available post‑exploitation tool that harvests saved passwords, session cookies, OAuth refresh tokens, credit card numbers, autofill data and browsing history from major Chromium-based browsers (Chrome, Edge, Brave, Opera variants, Vivaldi) and Firefox; it implements an App‑Bound Encryption bypass for Chrome 127+ by spawning a headless Chromium instance and injecting a DLL via Early Bird APC to use the IElevator COM interface, retrieves DPAPI/NSS secrets for other browsers, includes operational evasion features (string obfuscation, API hashing, PPID/argument spoofing, handle duplication, custom SQLite parser), and outputs structured JSON—making it a high‑risk tool for credential and session theft with practical detection and mitigation paths described.