Hacking Tools, Hacker News & Cyber Security

DumpBrowserSecrets is a publicly available post‑exploitation tool that harvests credentials and session material from major browsers (Chrome, Edge, Brave, Opera variants, Vivaldi, and Firefox). It implements an App‑Bound Encryption bypass for Chromium-based browsers by spawning a headless Chromium process, injecting a DLL via Early Bird APC, and using the IElevator COM interface to decrypt keys; DPAPI and NSS decryption are handled for other browsers. The tool extracts cookies, saved logins, OAuth refresh tokens, credit card data, autofill entries, history, and bookmarks, includes evasion features aimed at EDRs, and is presented for red‑team/assumed‑breach testing while also representing a high‑impact credential theft capability.