Hacking Tools, Hacker News & Cyber Security

**DumpBrowserSecrets** is a public post-exploitation browser credential-harvesting tool that bypasses Chrome's App‑Bound Encryption (and uses DPAPI/NSS for other browsers) by spawning a headless Chromium process, injecting a DLL via Early Bird APC, and using the IElevator COM interface to decrypt stored keys; it extracts cookies, saved logins, OAuth refresh tokens, credit cards, autofill data, history and bookmarks and includes operational evasion features and guidance for detection and mitigation.