Hacking Tools, Hacker News & Cyber Security

DumpBrowserSecrets is a precompiled Windows post‑exploitation tool that harvests browser-stored secrets (saved passwords, session cookies, OAuth refresh tokens, credit card data, autofill entries, history, bookmarks) from major Chromium-based and Gecko-based browsers. It implements a Chromium App‑Bound Encryption bypass by spawning a headless Chromium process, injecting a DLL via Early Bird APC to call the IElevator COM interface to decrypt the app_bound_encrypted_key, and uses DPAPI/NSS methods for other browsers; the tool includes multiple evasion techniques and outputs structured JSON for red‑team use.