Hacking Tools, Hacker News & Cyber Security

DumpBrowserSecrets is a publicly documented post-exploitation tool designed to harvest browser-stored secrets from Windows hosts (Chrome, Edge, Brave, Opera variants, Vivaldi, and Firefox). It implements an App-Bound Encryption bypass for Chromium-based browsers by spawning a headless process and performing Early Bird APC DLL injection to call the IElevator COM interface, retrieves DPAPI or NSS keys where applicable, and outputs structured JSON of cookies, saved logins, OAuth refresh tokens, credit cards, autofill data and history. The report details evasion features (string obfuscation, API hashing, PPID/argument spoofing, handle duplication, custom SQLite parser), an operator attack scenario, detection opportunities, and mitigation recommendations.