Prisoners Hack Prison From Inside Prison

DumpBrowserSecrets is a publicly available post‑exploitation tool that harvests browser-stored secrets (saved credentials, session cookies, OAuth refresh tokens, credit cards, autofill, and history) from major Chromium-based browsers and Firefox. It implements an App‑Bound Encryption bypass for Chrome/Edge/Brave by spawning a headless Chromium process and injecting a DLL to call the IElevator COM interface (Early Bird APC injection), handles DPAPI-protected browsers and NSS-encrypted Firefox logins, includes multiple evasion features, and outputs structured JSON for red-team or adversary use — enabling rapid account takeover and lateral movement from compromised developer endpoints.