Secunia Releases Software Inspector

DumpBrowserSecrets is a Windows post-exploitation tool that extracts browser-stored secrets (saved credentials, cookies, OAuth tokens, credit cards, autofill, history, bookmarks) from major Chromium-based and Firefox browsers. It bypasses App-Bound Encryption for Chromium (via spawning a headless process and DLL injection using Early Bird APC to call the IElevator COM interface), retrieves DPAPI keys for some browsers, and handles NSS for Firefox; the tool includes evasion features (string obfuscation, API hashing, PPID/argument spoofing, handle duplication, and a custom SQLite parser), outputs structured JSON, and is presented as a red-team tool with guidance on detection and mitigation.