Hacking Tools, Hacker News & Cyber Security

DumpBrowserSecrets is a publicly available post-exploitation tool that harvests browser-stored credentials and session tokens from Chromium-based browsers (using an IElevator App‑Bound Encryption bypass via DLL injection) and from Firefox (via NSS decryption). The report details supported browsers, extracted data types (cookies, saved logins, OAuth refresh tokens, credit cards, autofill, history, bookmarks), operational features (headless spawn, Early Bird APC injection, handle duplication, custom SQLite parser, PPID/argument spoofing), an example attack scenario, detection opportunities, and mitigation guidance for enterprise environments.