Hacking Tools, Hacker News & Cyber Security

DumpBrowserSecrets is a precompiled Windows post‑exploitation tool that extracts browser‑stored secrets (saved logins, session cookies, OAuth refresh tokens, credit cards, autofill data and history) from major browsers including Chromium‑based browsers and Firefox. It bypasses Chrome's App‑Bound Encryption by spawning a headless Chromium process and injecting a DLL to call the IElevator COM interface, supports DPAPI and NSS decryption for other browsers, includes multiple evasion techniques (string obfuscation, API hashing, PPID/argument spoofing, Early Bird APC injection), and is positioned for red‑team use while representing a high‑impact credential theft capability; the report also provides detection opportunities and mitigations.