Hacking Tools, Hacker News & Cyber Security

DumpBrowserSecrets is a publicly documented post‑exploitation credential‑harvesting tool that targets major Chromium and Gecko browsers on Windows to extract saved credentials, session cookies, OAuth refresh tokens, credit card data, autofill entries, and browsing history. It implements an App‑Bound Encryption bypass for Chrome/Brave/Edge by spawning a headless Chromium process and injecting a DLL via Early Bird APC to call the IElevator COM interface (and uses DPAPI/NSS methods for other browsers), includes multiple operational evasion techniques, outputs structured JSON for red‑team use, and is relevant for testing detection and mitigation of browser‑based credential theft.