Hacking Tools, Hacker News & Cyber Security

DumpBrowserSecrets is a post‑exploitation credential‑harvesting tool (and successor to DumpChromeSecrets) designed to extract saved passwords, session cookies, OAuth refresh tokens, credit card data, autofill entries, and history from major Chromium-based and Firefox browsers on Windows. It implements a bypass for Chrome’s App‑Bound Encryption (using a headless Chromium process and IElevator COM decryption via injected DLL and Early Bird APC injection), handles DPAPI for other Chromium forks, uses NSS decryption for Firefox, includes multiple evasion features (string obfuscation, API hashing, PPID/argument spoofing, handle duplication, custom SQLite parser), writes structured JSON output, and is presented as a red‑team testing tool with guidance on detection and mitigation.