Hacking Tools, Hacker News & Cyber Security

DumpBrowserSecrets is a publicly documented post‑exploitation tool that harvests browser-stored credentials and session tokens from major Windows browsers (Chrome, Edge, Brave, Opera, Vivaldi, Firefox). It bypasses Chrome's App‑Bound Encryption by spawning a headless Chromium and injecting a DLL (Early Bird APC) to use the IElevator COM interface, retrieves DPAPI or NSS keys for other browsers, and outputs structured JSON containing cookies, OAuth refresh tokens, saved logins, credit cards, autofill data and history; the report describes operational evasion, use cases for red teams, detection opportunities, and recommended mitigations.