Social Engineering Gets a Big Jewel Heist

DumpBrowserSecrets is a Windows post-exploitation tool that harvests browser-stored secrets (saved logins, session cookies, OAuth refresh tokens, credit card numbers, autofill data, and history) from Chromium-based browsers and Firefox by spawning a headless browser, injecting a DLL to decrypt App-Bound Encryption keys via the IElevator COM interface (or using DPAPI/NSS where applicable), and writing structured JSON output; it includes operational evasion features (string obfuscation, API hashing, PPID/argument spoofing, Early Bird APC injection, file-handle duplication) and is presented as a red-team oriented implementation for testing endpoint and SaaS credential exposure.