Hacking Tools, Hacker News & Cyber Security

DumpBrowserSecrets is a post‑exploitation credential‑harvesting tool that extracts saved passwords, cookies, OAuth refresh tokens, credit cards, autofill data and history from major browsers (Chrome, Edge, Brave, Opera variants, Vivaldi, Firefox). It bypasses Chrome's App‑Bound Encryption by spawning a headless Chromium process and injecting a DLL via Early Bird APC to use the IElevator COM interface, supports DPAPI and NSS decryption for other browsers, and includes evasion techniques (string obfuscation, API hashing, PPID/argument spoofing, file-handle duplication). The report details usage, extracted output (JSON), attack scenarios for lateral movement/cloud takeover, and detection/mitigation opportunities.