Hacking Tools, Hacker News & Cyber Security

DumpBrowserSecrets is a Windows post-exploitation tool that harvests browser-stored credentials and session data across Chromium-based (Chrome, Edge, Brave, Opera variants, Vivaldi) and Firefox browsers by using techniques including Early Bird APC DLL injection into a headless Chromium process to invoke the IElevator COM interface and decrypt App-Bound Encryption keys, DPAPI extraction for some Chromium forks, and NSS decryption for Firefox; the report covers functionality, extracted data types, evasion features, an attack scenario, detection opportunities and mitigation recommendations.