Hacking Tools, Hacker News & Cyber Security

DumpBrowserSecrets is a post-exploitation browser credential-harvesting tool that extracts saved passwords, session cookies, OAuth refresh tokens, credit card data, autofill entries and browsing history from major Chromium- and Gecko-based browsers on Windows. The report documents its technical approach — spawning a headless Chromium process and performing Early Bird APC DLL injection to use the IElevator COM interface to decrypt App-Bound Encryption keys, handling DPAPI and NSS-based stores for other browsers — plus evasion techniques, output format, attack scenarios, detection opportunities, and mitigation guidance for defenders.