Hacking Tools, Hacker News & Cyber Security

DumpBrowserSecrets is a publicly available post‑exploitation tool that harvests browser-stored secrets (saved credentials, session cookies, OAuth refresh tokens, credit cards, autofill entries, history and bookmarks) from major Chromium-based browsers and Firefox. It implements an App‑Bound Encryption bypass for Chrome 127+ by spawning a headless Chromium process and injecting a DLL via Early Bird APC to call the IElevator COM interface, retrieves DPAPI or NSS keys where applicable, and writes structured JSON output; the report covers operational evasion techniques, usage examples, detection signals, and mitigation recommendations for enterprise environments.