Hacking Tools, Hacker News & Cyber Security

DumpBrowserSecrets is a post‑exploitation credential‑harvesting tool for Windows that targets Chromium‑based and Firefox browsers to extract saved passwords, session cookies, OAuth refresh tokens, credit cards, autofill data and history. It defeats Chrome's App‑Bound Encryption by spawning a headless Chromium process and injecting a DLL via Early Bird APC to call the IElevator COM interface and retrieve encryption keys, then decrypts on‑disk SQLite/JSON stores; the tool includes multiple evasion features and is distributed as a precompiled executable intended for red‑team/assumed‑breach use, with documented detection and mitigation guidance.