Hacking Tools, Hacker News & Cyber Security

DumpBrowserSecrets is a post-exploitation credential-harvesting tool that targets Chromium-based browsers (Chrome, Edge, Brave) and Firefox to extract saved credentials, cookies, OAuth tokens, credit card data, autofill entries and browsing history. It bypasses Chrome's App-Bound Encryption by spawning a headless Chromium process and injecting a DLL via Early Bird APC to call the IElevator COM interface, uses DPAPI/NSS handling for other browsers, and includes evasion techniques (string obfuscation, API hashing, PPID/argument spoofing, handle duplication). The tool outputs structured JSON, is aimed at red teams for assumed-breach testing, but its public availability and capabilities make it useful for real-world attackers seeking lateral movement and cloud account takeover.