Hacking Tools, Hacker News & Cyber Security

DumpBrowserSecrets is a publicly available post-exploitation tool that harvests browser-stored credentials and session material (cookies, saved logins, OAuth refresh tokens, credit cards, autofill, history) across major browsers. It implements an App-Bound Encryption bypass for Chromium-based browsers by spawning a headless Chromium process and injecting a DLL via Early Bird APC to call the IElevator COM interface, and it includes DPAPI/NSS handling, evasion features (string obfuscation, API hashing, PPID/argument spoofing, handle duplication), and outputs structured JSON for red-team use; the report also covers detection opportunities and mitigation recommendations.