Hacking Tools, Hacker News & Cyber Security

DumpBrowserSecrets is a publicly available post‑exploitation tool that harvests browser‑stored secrets (saved passwords, cookies, OAuth refresh tokens, credit cards, autofill and history) across major Chromium-based browsers and Firefox. It implements an App‑Bound Encryption bypass for Chrome/Edge/Brave by spawning a headless Chromium process and injecting a DLL via Early Bird APC to call the IElevator COM interface, and uses DPAPI/NSS strategies for other browsers; it includes multiple operational evasion features and produces structured JSON output for red-team use. The report details capabilities, supported browsers, operational usage, extraction output, detection opportunities, and mitigation recommendations.