Hacking Tools, Hacker News & Cyber Security

DumpBrowserSecrets is a post‑exploitation tool that harvests browser‑stored secrets (saved passwords, session cookies, OAuth refresh tokens, credit cards, autofill, history) from Chromium‑based and Gecko‑based browsers. It bypasses Chrome's App‑Bound Encryption by spawning a headless Chromium process and injecting a DLL that leverages the IElevator COM interface via Early Bird APC injection to extract encryption keys, and uses DPAPI or NSS methods for other browsers; the report details usage, evasion features, an attack scenario, detection opportunities, and mitigations.