Hacking Tools, Hacker News & Cyber Security

DumpBrowserSecrets is a post‑exploitation credential‑harvesting tool that extracts saved passwords, session cookies, OAuth refresh tokens, credit card data, autofill entries and browsing history from major browsers (Chrome, Edge, Brave, Opera, Opera GX, Vivaldi, and Firefox). The report details its dual‑component design (executable + DLL), an App‑Bound Encryption bypass for Chromium browsers using the IElevator COM interface via Early Bird APC DLL injection, DPAPI/NSS handling for other browsers, operational evasion features, example attack scenarios, and recommended detection and mitigation strategies.