Hacking Tools, Hacker News & Cyber Security

DumpBrowserSecrets is a Windows post‑exploitation tool designed to harvest browser‑stored credentials and session data from major browsers (Chrome, Edge, Brave, Opera variants, Vivaldi, and Firefox). It bypasses Chromium App‑Bound Encryption by spawning a headless Chromium process and injecting a DLL that uses the IElevator COM interface to decrypt the app_bound_encrypted_key, uses DPAPI or NSS where applicable, and outputs structured JSON of recovered cookies, saved logins, OAuth tokens, credit cards, autofill data, history and bookmarks. The report details operational features (Early Bird APC DLL injection, PPID/argument spoofing, API hashing, file-handle duplication, custom SQLite parser), an example attack scenario, red team relevance, and detection/mitigation recommendations.