Hacking Tools, Hacker News & Cyber Security

DumpBrowserSecrets is a publicly available post-exploitation tool that harvests browser-stored secrets from major Chromium-based and Firefox browsers. It bypasses Chrome's App-Bound Encryption by spawning a headless Chromium process and injecting a DLL via Early Bird APC to use the IElevator COM interface, and it extracts cookies, saved logins, OAuth refresh tokens, credit card details, autofill data, history, and bookmarks into JSON. The tool includes evasion features (string obfuscation, API hashing, PPID/argument spoofing, handle duplication, custom SQLite parser) and is positioned for red team/assumed-breach testing but poses a significant risk if used maliciously for cloud account takeover and lateral movement.