Hacking Tools, Hacker News & Cyber Security

DumpBrowserSecrets is a publicly available post‑exploitation tool that harvests credentials and session data from major browsers (Chrome, Edge, Brave, Opera variants, Vivaldi, and Firefox). It implements an App‑Bound Encryption bypass for Chromium browsers by spawning a headless Chromium process and injecting a DLL via Early Bird APC to call the IElevator COM interface, decrypts browser-stored secrets (cookies, OAuth tokens, saved logins, credit cards, autofill, history) and outputs structured JSON; the tool includes multiple evasive techniques aimed at reducing EDR detection and is intended for red team/assumed‑breach testing but represents a high‑impact credential theft capability if misused.