Hacking Tools, Hacker News & Cyber Security

DumpBrowserSecrets is a precompiled Windows post‑exploitation tool that harvests browser-stored secrets (saved passwords, session cookies, OAuth refresh tokens, credit cards, autofill data, bookmarks and history) from Chromium-based and Firefox browsers. The report explains its architecture and techniques — notably an App‑Bound Encryption bypass using IElevator COM via Early Bird APC DLL injection into a headless Chromium process, DPAPI/NSS handling for other browsers, and multiple evasion features — and provides usage examples, detection opportunities, and mitigations for defenders.