FreeBSD Local Root Escalation Vulnerability

This report analyzes DumpBrowserSecrets, a publicly available post‑exploitation tool that harvests browser‑stored credentials and session tokens across Chromium‑based browsers (including App‑Bound Encryption bypass via IElevator COM and Early Bird APC DLL injection), DPAPI‑protected browsers, and Firefox (NSS). It details functionality, supported browsers and data types (cookies, saved logins, OAuth refresh tokens, credit cards, autofill, history), evasion techniques, usage examples for red‑team/assumed‑breach scenarios, detection opportunities, and mitigation recommendations.