Hacking Tools, Hacker News & Cyber Security

DumpBrowserSecrets is a post‑exploitation credential‑harvesting tool that extracts saved passwords, cookies, OAuth refresh tokens, credit cards, autofill data and browsing history from Chrome, Edge, Brave, Opera family, Vivaldi and Firefox. It implements an App‑Bound Encryption bypass for Chromium-based browsers by spawning a headless Chromium process and injecting a DLL via Early Bird APC to use the IElevator COM interface, while handling DPAPI and NSS models for other browsers; it includes evasion features (string obfuscation, API hashing, PPID/argument spoofing, handle duplication, custom SQLite parser) and writes structured JSON output for red team use, with detection and mitigation recommendations.