Hacking Tools, Hacker News & Cyber Security

DumpBrowserSecrets is a technical write-up of a Windows post‑exploitation credential extraction tool that targets Chromium- and Gecko-based browsers to retrieve saved passwords, session cookies, OAuth refresh tokens, credit card data, autofill entries and browsing history. It explains implementation details — spawning headless Chromium, Early Bird APC DLL injection to use the IElevator COM interface to decrypt App‑Bound Encryption keys, DPAPI and NSS handling for other browsers — describes evasion techniques (string obfuscation, API hashing, PPID/argument spoofing, handle duplication, custom SQLite parser), provides usage and attack scenarios, and highlights detection and mitigation strategies for defenders.