Merry Christmas to All

DumpBrowserSecrets is a publicly documented post‑exploitation tool that harvests saved credentials, session cookies, OAuth refresh tokens, credit card data, autofill entries, and browsing history from major Chromium‑based browsers (Chrome, Edge, Brave, Opera variants, Vivaldi) and Firefox. It implements an App‑Bound Encryption bypass for Chrome 127+ by spawning a headless Chromium process and injecting a DLL to use the IElevator COM interface to decrypt keys, includes DPAPI and NSS handling for other browsers, and incorporates evasion techniques (string obfuscation, API hashing, PPID/argument spoofing, custom SQLite parsing); the report explains usage, detection opportunities, and mitigation recommendations.