Apple Fixes ‘Misleading’ Leopard Firewall Settings

DumpBrowserSecrets is a post-exploitation credential-harvesting tool that extracts saved passwords, session cookies, OAuth refresh tokens, credit card data, autofill entries, and browsing history from Chrome, Edge, Brave, Opera, Opera GX, Vivaldi, and Firefox. The tool bypasses Chromium App-Bound Encryption by spawning a headless Chromium process and injecting a DLL (using Early Bird APC) to call the IElevator COM interface, handles DPAPI and NSS decryption for other browsers, and outputs structured JSON; it includes evasion techniques (string obfuscation, API hashing, PPID/argument spoofing, handle duplication) and is framed for red-team assumed-breach testing with guidance on detection and mitigation.