Hacking Tools, Hacker News & Cyber Security

DumpBrowserSecrets is a publicly available post‑exploitation tool that harvests browser‑stored credentials (passwords, session cookies, OAuth tokens, credit cards, autofill and history) from major Chromium and Firefox browsers. It implements an App‑Bound Encryption bypass for Chrome/Edge/Brave by spawning a headless Chromium process, injecting a DLL via Early Bird APC to call the IElevator COM interface and retrieve decryption keys, and includes multiple operational evasion techniques; extracted data is output as structured JSON for use in lateral movement or cloud account takeover testing.