April Commenter of the Month Competition Winner!

This report describes DumpBrowserSecrets, a publicly available post-exploitation tool for Windows that harvests browser-stored credentials (cookies, saved logins, OAuth refresh tokens, credit cards, autofill data, history, and bookmarks) from Chrome, Edge, Brave, Opera-family browsers, Vivaldi, and Firefox. It explains how the tool bypasses App-Bound Encryption in modern Chromium builds by spawning a headless browser and injecting a DLL to call the IElevator COM interface, outlines DPAPI/NSS handling for other browsers, lists evasion techniques (string obfuscation, API hashing, PPID/argument spoofing, file-handle duplication), provides usage and attack scenarios, and discusses detection and mitigation opportunities for defenders.