Hacking Tools, Hacker News & Cyber Security

DumpBrowserSecrets is a Windows post-exploitation credential-harvesting tool that targets Chromium-based browsers (Chrome, Edge, Brave, Opera variants, Vivaldi) and Firefox to extract cookies, saved credentials, OAuth refresh tokens, credit cards, autofill data and browsing history. It bypasses Chrome's App‑Bound Encryption by spawning a headless Chromium process and injecting a DLL via Early Bird APC to use the IElevator COM interface for key decryption, and includes multiple evasion techniques (string obfuscation, API hashing, PPID/argument spoofing, handle duplication). The tool outputs structured JSON for red-team use but describes capabilities that enable rapid cloud session replay and account takeover if used by malicious actors.