Hacking Tools, Hacker News & Cyber Security

DumpBrowserSecrets is a publicly available post‑exploitation tool that harvests browser‑stored secrets (saved passwords, session cookies, OAuth refresh tokens, credit cards, autofill data, history, and bookmarks) from Chromium‑based browsers (Chrome, Edge, Brave, Opera variants, Vivaldi) and Firefox. The report describes how the tool bypasses App‑Bound Encryption by injecting a DLL into a headless Chromium process (using Early Bird APC and the IElevator COM interface), handles DPAPI and NSS decryption, includes evasion features to reduce detection, and provides usage examples, attack scenarios, detection opportunities, and mitigations for defenders.