Audit Gitlab For Sensitive Data & Creds

DumpBrowserSecrets is a publicly available post-exploitation tool that extracts saved passwords, session cookies, OAuth refresh tokens, credit card data, autofill entries, and browsing history from major browsers (Chrome, Edge, Brave, Opera, Opera GX, Vivaldi, and Firefox). The report explains the tool's architecture (an executable plus a DLL that uses Early Bird APC injection and the IElevator COM interface to bypass Chrome's App-Bound Encryption), evasion techniques, operational usage, and recommended detection/mitigation approaches.