Hacking Tools, Hacker News & Cyber Security

DumpBrowserSecrets is a post‑exploitation credential‑harvesting tool designed to extract saved logins, session cookies, OAuth tokens, credit card data, autofill entries, and history from major Chromium‑based and Firefox browsers. It bypasses Chrome’s App‑Bound Encryption by spawning a headless Chromium process, injecting a DLL via Early Bird APC to call the IElevator COM interface (returning decrypted keys), and uses DPAPI/NSS handling for other browsers; the tool includes evasion features (string obfuscation, API hashing, PPID/argument spoofing, handle duplication) and outputs structured JSON for red‑team or offensive use, with recommendations for detection and mitigation.