Another 0-day MySpace XSS Exploit

DumpBrowserSecrets is a post-exploitation credential-harvesting tool for Windows that extracts saved passwords, cookies, OAuth tokens, credit cards, autofill data, and history from Chromium- and Gecko-based browsers. The tool bypasses Chrome's App‑Bound Encryption by spawning a headless Chromium process and injecting a DLL (via Early Bird APC) to use the IElevator COM interface, retrieves DPAPI/NSS keys where applicable, outputs structured JSON, and includes operational evasion techniques; the report covers usage, attack scenarios, detection strategies, and mitigations.