Active Exploitation Of Unpatched PDF Vulnerability

DumpBrowserSecrets is a publicly available post-exploitation tool that harvests credentials and session tokens from major browsers (Chrome, Edge, Brave, Opera, Opera GX, Vivaldi, and Firefox). It bypasses Chrome's App-Bound Encryption by injecting a DLL into a headless Chromium process to use the IElevator COM interface, retrieves DPAPI or NSS-protected secrets where applicable, and writes structured JSON output; the tool includes evasion features (string obfuscation, API hashing, PPID/argument spoofing, file-handle duplication) and is positioned for red-team/assumed-breach use but could be misused by attackers to enable lateral movement and cloud account takeover.