‘Free’ USB Drives Defeat Company Security

DumpBrowserSecrets is a publicly available post‑exploitation tool that extracts browser‑stored secrets (saved logins, session cookies, OAuth refresh tokens, credit cards, autofill data and history) from major Windows browsers. It implements an App‑Bound Encryption bypass for Chromium (injecting a DLL into a headless Chromium process via Early Bird APC to use the IElevator COM interface), handles DPAPI and NSS cases for other browsers, includes operational evasion features (string obfuscation, API hashing, PPID/argument spoofing, handle duplication), and outputs structured JSON — enabling rapid credential theft and potential cloud account takeover if abused.