Hacking Tools, Hacker News & Cyber Security

DumpBrowserSecrets is a post-exploitation browser credential-harvesting tool that targets Chromium- and Gecko-based browsers (Chrome, Edge, Brave, Opera variants, Vivaldi, and Firefox). It implements an App-Bound Encryption bypass for Chromium-based browsers by spawning a headless browser and injecting a DLL via Early Bird APC to use the IElevator COM interface, retrieves DPAPI or NSS-encrypted keys where applicable, and extracts cookies, saved logins, OAuth refresh tokens, credit cards, autofill data, and history to structured JSON; the report covers usage, evasion techniques, an attack scenario, detection opportunities, and mitigations.