Hacking Tools, Hacker News & Cyber Security

DumpBrowserSecrets is a post-exploitation credential-harvesting tool for Windows that extracts passwords, session cookies, OAuth refresh tokens, credit card data, autofill entries, and browsing history from Chromium-based (Chrome, Edge, Brave, Opera variants, Vivaldi) and Firefox browsers by using techniques such as headless Chromium spawning, Early Bird APC DLL injection, and IElevator COM to bypass App-Bound Encryption and DPAPI/NSS protections; the report details its capabilities, operational workflow, evasion methods, detection indicators, and mitigation recommendations.