Chrome and Firefox Face Clickjacking Exploit

DumpBrowserSecrets is a post-exploitation credential-harvesting tool that extracts passwords, session cookies, OAuth refresh tokens, credit card data, autofill entries, and browsing history from major Chromium-based and Firefox browsers by using DLL injection and an IElevator COM bypass to defeat App-Bound Encryption, plus DPAPI/NSS handling for other browsers; the report covers architecture, supported browsers, evasion techniques, an attack scenario, and detection/mitigation recommendations.