Hacking Tools, Hacker News & Cyber Security

DumpBrowserSecrets is a post-exploitation credential-harvesting tool that targets major Windows browsers (Chrome/Edge/Brave via an App-Bound Encryption bypass, Opera/Vivaldi via DPAPI, and Firefox via NSS) to extract saved passwords, session cookies, OAuth refresh tokens, credit cards, autofill data, and browsing history. It uses Early Bird APC DLL injection into a headless Chromium process to access the IElevator COM interface and decrypt app_bound_encrypted_key, includes operational evasion techniques (string obfuscation, API hashing, PPID/argument spoofing, handle duplication), and outputs structured JSON for red-team or adversary use; the report also outlines detection opportunities and mitigation recommendations.