Hacking Tools, Hacker News & Cyber Security

DumpBrowserSecrets is a publicly documented post‑exploitation tool that extracts browser-stored secrets (saved passwords, session cookies, OAuth tokens, credit card data, autofill entries, history, bookmarks) from major Windows browsers. It implements an App‑Bound Encryption bypass for recent Chromium builds by injecting a DLL into a headless Chromium process (Early Bird APC + IElevator COM) to decrypt keys, supports DPAPI and NSS decryption for other browsers, includes evasion techniques (string obfuscation, API hashing, PPID/argument spoofing, handle duplication), and outputs structured JSON for red-team use; the report highlights detection opportunities and mitigations.