Hacking Tools, Hacker News & Cyber Security

DumpBrowserSecrets is a publicly available post-exploitation tool that harvests browser-stored secrets (saved logins, session cookies, OAuth refresh tokens, credit cards, autofill data and history) from Chromium-based browsers and Firefox on Windows. It implements a DLL injection into a headless Chromium process using Early Bird APC to access the IElevator COM interface and decrypt Chrome's App-Bound Encryption key, uses DPAPI retrieval for Opera/Vivaldi, and NSS decryption for Firefox; the report details usage, evasion techniques, an attack scenario demonstrating cloud account takeover risk, and detection/mitigation recommendations.