Hacking Tools, Hacker News & Cyber Security

DumpBrowserSecrets is a Windows post‑exploitation tool that harvests browser‑stored secrets (saved credentials, session cookies, OAuth refresh tokens, credit cards, autofill data, history, and bookmarks) from major Chromium‑based browsers and Firefox. It bypasses Chrome's App‑Bound Encryption (Chrome 127+) by spawning a headless Chromium process and injecting a DLL via Early Bird APC to use the IElevator COM interface, and handles DPAPI and NSS decryption for other browsers; the tool includes operational evasion features (string obfuscation, API hashing, PPID/argument spoofing, file handle duplication) and outputs structured JSON for red team or adversary use, with guidance on detection and mitigation.