Hacking Tools, Hacker News & Cyber Security

DumpBrowserSecrets is a Windows post-exploitation tool that harvests browser-stored secrets (saved passwords, session cookies, OAuth refresh tokens, credit card data, autofill, history, bookmarks) from major Chromium-based browsers and Firefox. It bypasses Chrome's App-Bound Encryption by injecting a DLL into a headless Chromium process using Early Bird APC and the IElevator COM interface, retrieves DPAPI keys for some browsers, and uses NSS decryption for Firefox; the report covers usage, evasion features, an attack scenario, detection opportunities, and mitigation guidance.