Hacking Tools, Hacker News & Cyber Security

DumpBrowserSecrets is a publicly documented post‑exploitation tool that harvests browser-stored credentials (passwords, session cookies, OAuth refresh tokens, credit cards, autofill, history) from Chromium-based browsers and Firefox. It bypasses Chrome's App‑Bound Encryption (Chrome 127+) by injecting a DLL into a spawned headless Chromium process using Early Bird APC and the IElevator COM interface to decrypt keys, handles DPAPI and NSS models for other browsers, includes evasion techniques to reduce EDR detection, and outputs structured JSON for rapid credential reuse in lateral movement and cloud account takeover scenarios.