Hacking Tools, Hacker News & Cyber Security

DumpBrowserSecrets is a public post‑exploitation tool designed to extract credentials and session material from major browsers (Chrome, Edge, Brave, Opera family, Vivaldi, Firefox). It uses a headless Chromium spawn and Early Bird APC DLL injection to leverage the IElevator COM interface and bypass App‑Bound Encryption on Chromium-based browsers, handles DPAPI for some Chromium forks, and uses NSS decryption for Firefox; outputs structured JSON and includes operational evasion techniques (string obfuscation, API hashing, PPID/argument spoofing, handle duplication, custom SQLite parser). The report discusses attack scenarios, detection opportunities (process injection, IElevator calls, non‑browser reads of browser SQLite DBs), and mitigation recommendations such as using external credential managers and EDR rules targeting the described behaviors.