Researcher Releases Android Exploit In Webkit Browser Engine

DumpBrowserSecrets is a Windows post-exploitation tool that harvests browser-stored secrets (saved logins, session cookies, OAuth refresh tokens, credit cards, autofill and history) from major browsers including Chrome/Edge/Brave (App-Bound Encryption bypass), Opera/Opera GX/Vivaldi (DPAPI) and Firefox (NSS). It uses headless Chromium + Early Bird APC DLL injection to access the IElevator COM interface and decrypt app_bound_encrypted_key, includes evasion features (string obfuscation, API hashing, PPID/argument spoofing, handle duplication), outputs structured JSON, and is presented as a red-team tool but represents a high-risk capability for real-world adversaries seeking lateral movement and cloud account takeover.