Hacking Tools, Hacker News & Cyber Security

DumpBrowserSecrets is a post-exploitation credential-harvesting tool that extracts browser-stored secrets (passwords, session cookies, OAuth refresh tokens, autofill data, credit cards, and history) from major Chromium-based and Firefox browsers. It implements an App-Bound Encryption bypass for Chrome/Edge/Brave by spawning a headless Chromium process and injecting a DLL via Early Bird APC to call the IElevator COM interface, and handles DPAPI and NSS models for other browsers; the report covers usage, evasion techniques, attack scenarios, and detection/mitigation recommendations, noting realistic risks to cloud and SaaS account takeover.