Hacking Tools, Hacker News & Cyber Security

DumpBrowserSecrets is a precompiled Windows post‑exploitation tool that harvests browser-stored secrets (saved passwords, cookies, OAuth refresh tokens, credit cards, autofill data, history and bookmarks) from major browsers. It implements an App‑Bound Encryption bypass for Chrome/Edge/Brave by spawning a headless Chromium, injecting a DLL via Early Bird APC to call the IElevator COM interface and retrieve encryption keys, handles DPAPI for Opera/Vivaldi and NSS for Firefox, and includes evasion features (string obfuscation, API hashing, PPID/argument spoofing, file-handle duplication). The report details usage, attack scenarios, detection opportunities, and mitigation guidance aimed at red team and security testing contexts.