Hacking Tools, Hacker News & Cyber Security

DumpBrowserSecrets is a post-exploitation credential-harvesting tool that extracts saved passwords, session cookies, OAuth refresh tokens, credit card numbers, autofill data, and browsing history from Chromium-based browsers (via an IElevator/App-Bound Encryption bypass using Early Bird APC DLL injection) and Firefox (via NSS decryption). The report details installation, usage, data output, evasion features, a realistic attack scenario, detection opportunities, and mitigation recommendations for enterprise environments.