Hacking Tools, Hacker News & Cyber Security

DumpBrowserSecrets is a publicly documented post‑exploitation tool that automates extraction of browser-stored secrets (saved passwords, session cookies, OAuth refresh tokens, credit cards, autofill and history) from Chrome, Edge, Brave (App-Bound Encryption), Opera/Opera GX/Vivaldi (DPAPI) and Firefox (NSS). It bypasses Chrome’s App-Bound Encryption by spawning a headless Chromium process, injecting a DLL via Early Bird APC to call the IElevator COM interface and retrieve decryption keys, includes multiple operational evasion features (string obfuscation, API hashing, PPID/argument spoofing, handle duplication), outputs structured JSON, and is presented with usage, attack scenarios, detection points, and mitigation recommendations.