Hacking Tools, Hacker News & Cyber Security

This report documents DumpBrowserSecrets, a publicly released post‑exploitation credential‑harvesting tool that extracts saved passwords, session cookies, OAuth refresh tokens, credit card data and browsing history from major Chromium and Firefox browsers by using DLL injection (Early Bird APC) to bypass App‑Bound Encryption (via the IElevator COM interface), retrieving DPAPI keys, and parsing on‑disk SQLite/JSON stores. The tool includes operational evasion features (string obfuscation, API hashing, PPID/argument spoofing, handle duplication, custom SQLite parser), outputs structured JSON, and is positioned for red team/assumed‑breach use; the report also covers detection opportunities and mitigation recommendations.