Hacking Tools, Hacker News & Cyber Security

DumpBrowserSecrets is a publicly released post‑exploitation tool that extracts saved passwords, session cookies, OAuth refresh tokens, credit card data, autofill entries, browsing history, and bookmarks from major Windows browsers. It bypasses Chrome's App‑Bound Encryption by spawning a headless Chromium process and injecting a DLL (Early Bird APC) to use the IElevator COM interface to decrypt keys, handles DPAPI and NSS decryption for other browsers, includes operational evasion techniques, outputs structured JSON, and is intended for red‑team assumed‑breach testing while representing a real risk for credential theft and cloud account takeover.