UK Government Set to Make ‘Hacking Tools’ Illegal

DumpBrowserSecrets is a post‑exploitation credential‑harvesting tool that extracts saved passwords, session cookies, OAuth refresh tokens, credit card data, autofill entries and history from major Windows browsers. It implements an App‑Bound Encryption bypass for Chromium browsers by spawning a headless process and injecting a DLL (via Early Bird APC) to call the IElevator COM interface, supports DPAPI and NSS decryption for other browsers, includes evasion techniques (string obfuscation, API hashing, PPID/argument spoofing, handle duplication), and outputs structured JSON for red team use; detection recommendations and mitigation guidance are provided.