Hacking Tools, Hacker News & Cyber Security

DumpBrowserSecrets is a post‑exploitation credential‑harvesting tool that extracts saved passwords, session cookies, OAuth refresh tokens, credit card data, autofill and browsing history from major Chromium‑based browsers (Chrome, Edge, Brave, Opera variants, Vivaldi) and Firefox. Its distinguishing capability is bypassing Chrome's App‑Bound Encryption by spawning a headless Chromium process and injecting a DLL via Early Bird APC to call the IElevator COM interface and decrypt the app_bound_encrypted_key; it also retrieves DPAPI and NSS secrets as appropriate. The tool includes operational evasion features (string obfuscation, API hashing, PPID/argument spoofing, custom SQLite parser), outputs structured JSON, and is framed as a red team/assumed‑breach utility while highlighting detection points and mitigation recommendations.