Hacking Tools, Hacker News & Cyber Security

DumpBrowserSecrets is a Windows post-exploitation tool that harvests browser-stored credentials and session tokens from major Chromium- and Gecko-based browsers by using headless Chromium process injection (Early Bird APC) and the IElevator COM interface to bypass App-Bound Encryption, plus DPAPI/NSS handling for other browsers; it outputs structured JSON and includes evasion features (string obfuscation, API hashing, PPID/argument spoofing, handle duplication, custom SQLite parser). The report documents supported browsers and data types, an attack scenario demonstrating rapid token/credential extraction useful for cloud account takeover and lateral movement, and detection/mitigation guidance for EDR and policy controls.