Hacking Tools, Hacker News & Cyber Security

DumpBrowserSecrets is a publicly available post‑exploitation tool (executable + DLL) that harvests browser-stored secrets from major Chromium-based and Firefox browsers on Windows. It implements an IElevator COM bypass by injecting a DLL into a headless Chromium process via Early Bird APC to decrypt App‑Bound Encryption keys (Chrome/Edge/Brave), uses DPAPI extraction for Opera-family browsers, and NSS decryption for Firefox; extracted data includes session cookies, OAuth refresh tokens, saved passwords, credit cards, autofill, and history. The report covers operational features (PPID/argument spoofing, API hashing, file-handle duplication), example attack scenarios, detection opportunities (IElevator usage, headless browser instantiation, unauthorized reads of browser SQLite databases), and mitigation recommendations such as using external credential managers and EDR rules targeting the described behaviors.