XML External Entity Vulnerability With Examples

DumpBrowserSecrets is a Windows post‑exploitation tool that extracts browser‑stored secrets (saved passwords, session cookies, OAuth refresh tokens, credit cards, autofill data, and history) from Chrome, Edge, Brave, Opera variants, Vivaldi, and Firefox. It bypasses Chrome’s App‑Bound Encryption by spawning a headless Chromium process and injecting a DLL via Early Bird APC to call the IElevator COM interface and decrypt the app_bound_encrypted_key, includes DPAPI and NSS handling for other browsers, and implements multiple evasion techniques; distributed as precompiled binaries on GitHub and framed for red‑team use but representing a high‑risk infostealer capability.