Hacking Tools, Hacker News & Cyber Security

DumpBrowserSecrets is a pre-compiled post‑exploitation tool that harvests saved credentials, session cookies, OAuth tokens, credit card data and browsing history from major Chromium-based and Firefox browsers by bypassing App‑Bound Encryption, DPAPI, and NSS protections; it uses techniques such as Early Bird APC DLL injection into a headless Chromium process and the IElevator COM interface to decrypt app_bound_encrypted_key and outputs structured JSON for red-team or offensive use. The report documents supported browsers, extracted data types, evasion features, installation/usage, an attack scenario demonstrating rapid credential extraction, and detection/mitigation recommendations.