Hacking Tools, Hacker News & Cyber Security

DumpBrowserSecrets is a Windows post-exploitation tool that harvests browser-stored secrets (saved credentials, session cookies, OAuth refresh tokens, credit cards, autofill, and history) across major Chromium-based and Firefox browsers. It implements an App-Bound Encryption bypass for Chrome/Brave/Edge by spawning a headless Chromium process and injecting a DLL (Early Bird APC) to call the IElevator COM interface, handles DPAPI-based browsers and NSS-based Firefox logins, includes operational evasion (string obfuscation, API hashing, PPID/argument spoofing, handle duplication, custom SQLite parser), and outputs structured JSON for rapid credential theft and session replay; the report also provides detection and mitigation advice.