Hacking Tools, Hacker News & Cyber Security

DumpBrowserSecrets is a publicly available post‑exploitation tool that harvests browser‑stored credentials (cookies, saved logins, OAuth refresh tokens, credit cards, autofill, history, bookmarks) from Chrome, Edge, Brave, Opera variants, Vivaldi, and Firefox. It implements an App‑Bound Encryption bypass for Chromium browsers by spawning a headless process and injecting a DLL via Early Bird APC to call the IElevator COM interface, and handles DPAPI and NSS decryption for other browsers; the tool includes evasion features (string obfuscation, API hashing, PPID/argument spoofing, file-handle duplication) and outputs structured JSON for red-team or malicious reuse, with recommended detection and mitigation approaches.