Google Leaves Android Users Vulnerable To WebView Exploit

DumpBrowserSecrets is a Windows post-exploitation tool that harvests browser-stored secrets (passwords, cookies, OAuth tokens, credit cards, autofill, history) from Chromium-based and Firefox browsers; it implements an App-Bound Encryption bypass for Chrome/Edge/Brave by spawning a headless Chromium process and injecting a DLL to use the IElevator COM interface, handles DPAPI for Opera-based browsers, and uses NSS decryption for Firefox. The report details its evasion techniques (string obfuscation, API hashing, PPID/argument spoofing, handle duplication, custom SQLite parser), output format, attack scenario, detection opportunities, and mitigation advice.