Hacking Tools, Hacker News & Cyber Security

DumpBrowserSecrets is a sophisticated post-exploitation credential-harvesting tool that extracts browser-stored secrets (saved logins, session cookies, OAuth refresh tokens, credit card data, autofill, history, bookmarks) from Chrome/Edge/Brave via an App-Bound Encryption bypass, from Opera/Opera GX/Vivaldi via DPAPI retrieval, and from Firefox via NSS decryption. It operates by spawning a headless Chromium process and injecting a DLL with Early Bird APC to use the IElevator COM interface to decrypt app_bound_encrypted_key, includes multiple evasion techniques (string obfuscation, API hashing, PPID/argument spoofing, handle duplication), outputs structured JSON for red-team use, and presents a high risk of cloud account takeover and lateral movement on compromised Windows developer workstations; the report also provides detection opportunities and mitigation advice.