Hacking Tools, Hacker News & Cyber Security

DumpBrowserSecrets is a post‑exploitation credential‑harvesting tool that extracts browser‑stored secrets (saved logins, cookies, OAuth refresh tokens, credit cards, autofill data, history, and bookmarks) from Chromium‑based browsers (Chrome, Edge, Brave, Opera variants, Vivaldi) and Firefox. The tool implements an App‑Bound Encryption bypass for Chrome 127+ by spawning a headless Chromium process and injecting a DLL via Early Bird APC to call the IElevator COM interface, includes DPAPI and NSS handling for other browsers, and bundles operational evasion features (string obfuscation, API hashing, PPID/argument spoofing, handle duplication, custom SQLite parser); the report also covers detection vectors and mitigations.