Hacking Tools, Hacker News & Cyber Security

DumpBrowserSecrets is a public post‑exploitation tool that harvests browser‑stored credentials and session tokens from major Chromium and Firefox browsers by bypassing App‑Bound Encryption (via spawning a headless Chromium, DLL injection and IElevator COM usage), DPAPI, or NSS protections. The report covers its capabilities, evasion techniques (Early Bird APC injection, PPID/argument spoofing, API hashing, custom SQLite parser), typical attack scenarios enabling lateral movement and cloud account takeover, detection opportunities, and mitigations.