Hacking Tools, Hacker News & Cyber Security

DumpBrowserSecrets is a post‑exploitation credential‑harvesting tool that targets major Windows browsers (Chrome, Edge, Brave, Opera family, Vivaldi, Firefox) to extract saved credentials, session cookies, OAuth refresh tokens and other sensitive browser data. The tool bypasses Chrome's App‑Bound Encryption by spawning a headless Chromium process and injecting a DLL via Early Bird APC to use the IElevator COM interface, retrieves DPAPI/NSS keys for other browsers, and writes structured JSON output; it includes multiple evasion features to reduce EDR detection and is presented as a red team tool but could be abused by adversaries. Detection focuses on anomalous process injection into browser processes, headless browser instantiation, non‑browser reads of browser SQLite databases, and IElevator COM calls; mitigation includes using dedicated credential managers and EDR rules that monitor these behaviors.