Hacking Tools, Hacker News & Cyber Security

DumpBrowserSecrets is a Windows post-exploitation tool that harvests browser-stored secrets (saved logins, cookies, OAuth refresh tokens, credit cards, autofill data, and browsing history) from Chromium-based browsers and Firefox. It implements an App-Bound Encryption bypass for Chrome/Edge/Brave by spawning a headless Chromium and injecting a DLL (Early Bird APC) to use the IElevator COM interface to decrypt encryption keys, handles DPAPI-based browsers, and uses NSS decryption for Firefox; the report covers capabilities, operational usage, detection opportunities, and mitigations.