Hacking Tools, Hacker News & Cyber Security

DumpBrowserSecrets is a public post‑exploitation credential‑harvesting tool that extracts saved passwords, session cookies, OAuth refresh tokens, credit card data, autofill entries and history from major Chromium‑based browsers (Chrome, Edge, Brave, Opera variants, Vivaldi) and Firefox. It implements an App‑Bound Encryption bypass for Chrome 127+ by spawning a headless Chromium process and using Early Bird APC DLL injection to call the IElevator COM interface, returns decrypted keys via a named pipe, and writes structured JSON output; the report also outlines evasion techniques, detection opportunities, and defensive mitigations.