Hacking Tools, Hacker News & Cyber Security

DumpBrowserSecrets is a public, precompiled Windows post-exploitation tool that harvests browser-stored credentials and session data from major Chromium and Firefox-based browsers. It bypasses Chrome's App-Bound Encryption by spawning a headless Chromium process and injecting a DLL (Early Bird APC + IElevator COM interface) to decrypt keys, supports DPAPI and NSS decryption for other browsers, includes evasion techniques (string obfuscation, API hashing, PPID/argument spoofing, file-handle duplication), and outputs structured JSON suitable for red-team use or misuse by adversaries; the report also outlines detection and mitigation strategies.