Hacking Tools, Hacker News & Cyber Security

DumpBrowserSecrets is a post‑exploitation credential‑harvesting tool that targets Chromium‑based browsers (Chrome, Edge, Brave, Opera variants, Vivaldi) and Firefox to extract cookies, saved logins, OAuth refresh tokens, credit cards, autofill entries and history. It bypasses Chrome's App‑Bound Encryption by spawning a headless Chromium process, injecting a DLL via Early Bird APC and using the IElevator COM interface to decrypt the app_bound_encrypted_key; it also handles DPAPI and NSS models, includes multiple evasion techniques (string obfuscation, API hashing, PPID/argument spoofing, handle duplication), and the report provides usage examples, detection opportunities and mitigation recommendations for defenders and red teams.