BobCat SQL Injection Tool based on Data Thief

DumpBrowserSecrets is a publicly available post‑exploitation tool that harvests browser-stored credentials and session tokens from Chromium-based browsers (including Chrome, Edge, Brave) and Firefox by bypassing App‑Bound Encryption (via a headless browser, DLL injection, and the IElevator COM interface) or using DPAPI/NSS decryption for other browsers. The report describes supported browsers and extracted data types (cookies, saved logins, OAuth refresh tokens, credit cards, autofill, history), operational evasion techniques (string obfuscation, API hashing, PPID/argument spoofing, handle duplication), typical attack scenarios, detection opportunities, and mitigation recommendations.