Hacking Tools, Hacker News & Cyber Security

DumpBrowserSecrets is a publicly released post‑exploitation tool that harvests browser‑stored secrets (saved logins, session cookies, OAuth refresh tokens, credit card numbers, autofill data, history, and bookmarks) from Chrome, Edge, Brave, Opera variants, Vivaldi, and Firefox. It implements a Chrome App‑Bound Encryption bypass by spawning a headless Chromium process, injecting a DLL via Early Bird APC to use the IElevator COM interface to decrypt the app_bound_encrypted_key, and uses DPAPI and NSS decryption where applicable; the tool includes evasion features (string obfuscation, API hashing, PPID/argument spoofing, handle duplication) and outputs structured JSON for red‑team use, with recommended detection and mitigation points documented.