OpenOffice.org Security ‘Insufficient’

DumpBrowserSecrets is a precompiled Windows post-exploitation tool that harvests credentials and session data from major browsers (Chrome, Edge, Brave, Opera variants, Vivaldi, and Firefox). It bypasses Chrome's App-Bound Encryption by injecting a DLL into a spawned headless Chromium process to call the IElevator COM interface, retrieves DPAPI/NSS keys for other browsers, and outputs structured JSON; the report describes its capabilities, evasion techniques, usage, and detection/mitigation guidance for red-team and defensive use.