Google Willing To Pay Bounty For Chrome Browser Bugs

DumpBrowserSecrets is a publicly available post-exploitation tool that harvests browser-stored credentials and session tokens from major Windows browsers (Chromium-based and Firefox). It bypasses Chrome's App‑Bound Encryption by injecting a DLL into a headless Chromium process (using Early Bird APC and the IElevator COM interface) to decrypt keys, supports DPAPI and NSS decryption for other browsers, and outputs structured JSON of cookies, saved logins, OAuth tokens, credit cards, autofill, and history — enabling rapid lateral movement and cloud account takeover on compromised developer workstations.