Site Guesses Your Gender via Browsing History

DumpBrowserSecrets is a post‑exploitation Windows tool that harvests browser-stored secrets across Chromium-based browsers (Chrome, Edge, Brave, Opera variants, Vivaldi) and Firefox by decrypting stored credentials and cookies—including bypassing Chrome's App-Bound Encryption via an IElevator COM bypass implemented through DLL injection into a headless Chromium process. The report details the tool's capabilities, extracted data types (saved logins, session cookies, OAuth refresh tokens, credit cards, autofill, history), operational evasion techniques, an attack scenario for rapid cloud account takeover from a compromised developer workstation, and detection and mitigation recommendations for defenders.