What Next? The Poker Rootkit of Course!

DumpBrowserSecrets is a post-exploitation credential-harvesting tool that extracts passwords, cookies, OAuth tokens, credit card data, autofill entries, history, and bookmarks from Chromium-based and Firefox browsers on Windows; it bypasses Chrome's App-Bound Encryption by spawning a headless Chromium process and using DLL injection with the IElevator COM interface to decrypt keys, includes evasion features (string obfuscation, API hashing, PPID/argument spoofing, file-handle duplication), outputs structured JSON, and is positioned for red-team/assumed-breach use while also representing a significant risk if misused by threat actors.