All You Need To Know About Cross-Site Request Forgery (CSRF)

DumpBrowserSecrets is a publicly available post-exploitation credential-harvesting tool that extracts saved passwords, session cookies, OAuth refresh tokens, credit card data, autofill entries, and browsing history from major browsers by bypassing App-Bound Encryption (via injecting a DLL into a headless Chromium process and using the IElevator COM interface), or by using DPAPI/NSS decryption for other browsers; the report describes its architecture, evasion techniques, an example attack scenario, detection points, and recommended mitigations.