Hacking Tools, Hacker News & Cyber Security

DumpBrowserSecrets is a Windows post‑exploitation credential‑harvesting tool (targeted at red teams) that extracts saved credentials, session cookies, OAuth refresh tokens, credit card information and browsing data from major browsers. It implements an App‑Bound Encryption bypass for Chromium (using a headless Chromium process, Early Bird APC DLL injection and the IElevator COM interface), supports DPAPI and Firefox/NSS decryption models, includes evasion features to reduce EDR detection, and documents usage, detection opportunities and mitigations.