CSRF Vulnerability in Twitter Allows Forced Following

DumpBrowserSecrets is a public post-exploitation tool that harvests browser-stored secrets (saved logins, session cookies, OAuth refresh tokens, credit cards, autofill, history, bookmarks) from major Chromium-based and Firefox browsers. It bypasses Chrome's App-Bound Encryption by injecting a DLL into a headless Chromium process using Early Bird APC and the IElevator COM interface to decrypt the app_bound_encrypted_key, supports DPAPI and NSS decryption for other browsers, and includes multiple evasion features to reduce detection by EDRs; the report covers usage, extracted data, detection/mitigation guidance, and red-team applicability.