Hacking Tools, Hacker News & Cyber Security

DumpBrowserSecrets is a publicly documented post-exploitation tool that extracts browser-stored secrets (saved passwords, session cookies, OAuth refresh tokens, credit cards, autofill data and history) from major Windows browsers. It implements an App‑Bound Encryption bypass for Chromium-based browsers by spawning a headless Chrome process and injecting a DLL via Early Bird APC to call the IElevator COM interface and decrypt the app_bound_encrypted_key, handles DPAPI for Opera/Vivaldi and NSS for Firefox, includes multiple operational evasion techniques, outputs structured JSON, and is positioned for red-team or adversary use while outlining detection and mitigation strategies.