Royal Canadian Mounted Police Arrest Heartbleed Hacker

DumpBrowserSecrets is a publicly available post-exploitation tool that harvests credentials and session data from major Windows browsers (Chrome, Edge, Brave, Opera family, Vivaldi, and Firefox). It bypasses Chrome's App-Bound Encryption by spawning a headless Chromium process and injecting a DLL via Early Bird APC to use the IElevator COM interface, retrieves DPAPI or NSS-protected secrets as needed, and outputs structured JSON. The tool includes operational evasion techniques (string obfuscation, API hashing, PPID/argument spoofing, handle duplication, and a custom SQLite parser) and is intended for red team/assumed-breach testing but materially lowers the cost of browser-based credential theft that can enable lateral movement and cloud account takeover.