Hacking Tools, Hacker News & Cyber Security

DumpBrowserSecrets is a Windows post‑exploitation tool that extracts browser‑stored credentials and session tokens from Chromium‑based and Firefox browsers by using DLL injection into a headless Chromium process to bypass App‑Bound Encryption (IElevator) and by retrieving DPAPI/NSS secrets where applicable. The report details functionality, supported browsers and data types, installation and usage, evasion techniques (string obfuscation, API hashing, PPID/argument spoofing, Early Bird APC injection), detection opportunities, and mitigation guidance for defenders.