Hacking Tools, Hacker News & Cyber Security

DumpBrowserSecrets is a publicly documented post-exploitation tool that harvests browser-stored secrets (passwords, cookies, OAuth refresh tokens, credit cards, autofill, history) from Chromium-based browsers and Firefox on Windows. It implements a sophisticated App-Bound Encryption bypass for Chrome/Edge/Brave by injecting a DLL into a headless Chromium process (Early Bird APC + IElevator COM interface) to retrieve decryption keys, handles DPAPI and NSS for other browsers, includes evasion techniques (string obfuscation, API hashing, PPID/argument spoofing, file-handle duplication), outputs structured JSON, and is positioned for red-team use but could be repurposed by adversaries for cloud account takeover and lateral movement.