Hacking Tools, Hacker News & Cyber Security

DumpBrowserSecrets is a publicly documented post‑exploitation tool that harvests browser‑stored credentials and session tokens from Chromium‑based browsers (Chrome, Edge, Brave, Opera, Vivaldi) and Firefox. It bypasses Chrome's App‑Bound Encryption by spawning a headless Chromium process, injecting a DLL via Early Bird APC to use the IElevator COM interface to decrypt keys, and then parses browser SQLite/JSON stores to extract cookies, OAuth refresh tokens, saved logins, credit card data and history; the tool includes evasion features (string obfuscation, API hashing, PPID/argument spoofing, handle duplication) and outputs structured JSON for red‑team or adversary use.