Hacking Tools, Hacker News & Cyber Security

DumpBrowserSecrets is a publicly documented post-exploitation credential extraction tool that targets Chromium-based (Chrome, Edge, Brave, Opera variants, Vivaldi) and Firefox browsers on Windows. It uses a compiled executable and a DLL that is injected into a headless Chromium process to bypass App-Bound Encryption via the IElevator COM interface (Early Bird APC injection) and decrypts browser-stored secrets (cookies, saved logins, OAuth refresh tokens, credit cards, autofill, history). The tool includes operational evasion features (string obfuscation, API hashing, PPID/argument spoofing, handle duplication, and a custom SQLite parser), outputs structured JSON of recovered data, and is presented as a red-team utility for assessing exposure of browser-stored credentials and endpoint controls.