Mac owned on 2nd day of Pwn2Own hack contest

**DumpBrowserSecrets** is a post-exploitation credential-harvesting tool for Windows that extracts saved passwords, cookies, OAuth tokens, credit card data and browsing history from major Chromium-based and Firefox browsers by using DLL injection into a headless Chromium process to bypass App-Bound Encryption (IElevator COM), DPAPI/NSS handling for other browsers, and a set of operational evasion techniques; it is distributed as a precompiled executable (with source available) intended for red-team/assumed-breach testing but presents a high-risk capability if used by adversaries.