Hacking Tools, Hacker News & Cyber Security

DumpBrowserSecrets is a post‑exploitation credential‑harvesting tool that extracts passwords, session cookies, OAuth refresh tokens, credit card data, autofill entries, and browsing history from major Chromium- and Gecko-based browsers. It uses a compiled executable plus a DLL to bypass Chromium App‑Bound Encryption (via spawning a headless Chromium process and IElevator COM calls with Early Bird APC DLL injection), handles DPAPI and NSS decryptions for other browsers, includes evasion features (string obfuscation, API hashing, PPID/argument spoofing, handle duplication, custom SQLite parser), and outputs structured JSON for red‑team or adversary use; the report also covers detection opportunities and mitigation recommendations.