Hacking Tools, Hacker News & Cyber Security

DumpBrowserSecrets is a Windows post-exploitation tool that extracts saved passwords, session cookies, OAuth refresh tokens, credit card data, autofill entries, and browsing history from major browsers (Chrome, Edge, Brave, Opera variants, Vivaldi, and Firefox). The report details the dual-component design (executable + DLL), an App-Bound Encryption bypass for Chromium via IElevator COM interface and Early Bird APC injection, DPAPI and NSS handling for other browsers, evasion features, usage examples, detection opportunities, and mitigation recommendations.