OWASP (Open Web Application Security Project) Testing Guide v3 Released

DumpBrowserSecrets is a precompiled Windows post-exploitation tool that harvests browser-stored credentials and session data (saved passwords, cookies, OAuth refresh tokens, credit cards, autofill, history, bookmarks) from Chrome, Edge, Brave, Opera, Opera GX, Vivaldi, and Firefox. It bypasses Chrome's App-Bound Encryption by spawning a headless Chromium process and injecting a DLL via Early Bird APC to call the IElevator COM interface to decrypt keys, uses DPAPI/NSS for other browsers, includes operational evasion features, and outputs structured JSON; the report also covers detection signals and mitigation recommendations.