Hacking Tools, Hacker News & Cyber Security

DumpBrowserSecrets is a Windows post-exploitation credential-harvesting tool (available as a compiled executable and optional DLL) that extracts cookies, saved logins, OAuth refresh tokens, credit card data, autofill entries, history, and bookmarks from major browsers. It implements an App-Bound Encryption bypass for Chromium-based browsers by spawning a headless Chromium process and injecting a DLL via Early Bird APC to call the IElevator COM interface, retrieves DPAPI keys for Opera-family browsers, and uses NSS decryption for Firefox; the tool includes evasion features (string obfuscation, API hashing, PPID/argument spoofing, handle duplication) and writes structured JSON output for red team use.