Hacking Tools, Hacker News & Cyber Security

DumpBrowserSecrets is a post‑exploitation credential‑harvesting tool that extracts browser‑stored secrets (cookies, saved logins, OAuth refresh tokens, credit cards, autofill, history, bookmarks) from Chromium‑based browsers (Chrome, Edge, Brave using App‑Bound Encryption), Opera/Vivaldi (DPAPI), and Firefox (NSS). The tool uses a two‑component design (an executable and an injected DLL) to spawn a headless Chromium process and perform Early Bird APC DLL injection to call the IElevator COM interface and decrypt app_bound_encrypted_key, with additional evasion measures (string obfuscation, API hashing, PPID/argument spoofing, handle duplication) and outputs structured JSON for red team use and testing detection controls.