Hacking Tools, Hacker News & Cyber Security

DumpBrowserSecrets is a post‑exploitation credential‑harvesting tool that targets browser‑stored secrets across Chrome, Edge, Brave, Opera variants, Vivaldi, and Firefox. It uses a headless Chromium process plus Early Bird APC DLL injection to leverage the IElevator COM interface and decrypt App‑Bound Encryption keys for Chromium browsers (and DPAPI/NSS methods for others), extracting cookies, OAuth refresh tokens, saved credentials, credit cards, autofill data, history, and bookmarks into JSON. The report describes operational evasion techniques, example attack scenarios, detection opportunities, and mitigation recommendations for enterprise environments.