Hacking Tools, Hacker News & Cyber Security

DumpBrowserSecrets is a publicly documented post-exploitation tool that harvests browser-stored credentials and session tokens from major Chromium- and Gecko-based browsers; it includes a DLL injection technique to bypass Chrome's App-Bound Encryption (via the IElevator COM interface), handles DPAPI and NSS decryption for other browsers, and outputs structured JSON. The report covers architecture, usage examples, evasion techniques (string obfuscation, API hashing, PPID/argument spoofing, Early Bird APC injection, handle duplication), an attack scenario demonstrating rapid credential/token extraction, and detection/mitigation recommendations for enterprise defenders.