Hacking Tools, Hacker News & Cyber Security

DumpBrowserSecrets is a publicly available post-exploitation tool that harvests browser-stored credentials (saved passwords, cookies, OAuth refresh tokens, credit cards, autofill entries, and history) from Chromium-based browsers and Firefox by using techniques such as Early Bird APC DLL injection and an IElevator COM bypass to defeat App‑Bound Encryption, plus DPAPI/NSS handling and multiple EDR-evasion features, enabling rapid credential and session theft useful for lateral movement and cloud account takeover.