Hacking Tools, Hacker News & Cyber Security

DumpBrowserSecrets is a publicly available post‑exploitation tool that extracts browser‑stored secrets (passwords, cookies, OAuth tokens, credit cards, autofill and history) from major Chromium‑based and Gecko browsers. It implements an App‑Bound Encryption bypass for Chrome/Brave/Edge by spawning a headless Chromium process, injecting a DLL via Early Bird APC to call the IElevator COM interface and decrypt the app_bound_encrypted_key, while using DPAPI retrieval for Opera/Vivaldi and NSS decryption for Firefox; the tool includes multiple evasion features and outputs structured JSON for rapid credential exfiltration and replay.