Hacking Tools, Hacker News & Cyber Security

DumpBrowserSecrets is a Windows post‑exploitation tool that harvests browser‑stored credentials (saved passwords, session cookies, OAuth refresh tokens, credit cards, autofill and history) from Chromium‑based and Gecko (Firefox) browsers by bypassing App‑Bound Encryption and using DPAPI/NSS decryption where applicable; it spawns headless browsers, injects a DLL via Early Bird APC to call the IElevator COM interface for key decryption, and includes operational evasion features to reduce EDR detection. The report documents supported browsers, extracted data types, usage examples, a realistic attack scenario, and detection/mitigation recommendations.