Hacking Tools, Hacker News & Cyber Security

DumpBrowserSecrets is a Windows post-exploitation tool that extracts saved credentials, session cookies, OAuth refresh tokens, credit card data, autofill entries, and browsing history from major browsers (Chrome, Edge, Brave, Opera variants, Vivaldi, and Firefox). It implements an App-Bound Encryption bypass for Chromium-based browsers by spawning a headless Chromium process and injecting a DLL to use the IElevator COM interface to decrypt the app_bound_encrypted_key, handles DPAPI and NSS models for other browsers, includes multiple evasion techniques (string obfuscation, API hashing, PPID/argument spoofing, early-bird APC injection, custom SQLite parser), and outputs structured JSON for red-team or offensive use while the report also outlines detection and mitigation approaches.