Hacking Tools, Hacker News & Cyber Security

DumpBrowserSecrets is a precompiled Windows post-exploitation tool that harvests browser-stored credentials and session data from Chromium-based (Chrome, Edge, Brave, Opera variants, Vivaldi) and Firefox browsers. It bypasses Chrome's App-Bound Encryption by spawning a headless Chromium process and injecting a DLL via Early Bird APC to call the IElevator COM interface and decrypt keys, also handling DPAPI and NSS models for other browsers; extracted artifacts (cookies, OAuth refresh tokens, saved logins, autofill, credit cards, history) are output as JSON. The report describes operational features (PPID/argument spoofing, API hashing, file-handle duplication), attack scenarios enabling cloud account takeover and lateral movement from developer workstations, and recommends detection opportunities and mitigations.