Hacking Tools, Hacker News & Cyber Security

DumpBrowserSecrets is a publicly available post-exploitation tool that harvests saved credentials, session cookies, OAuth refresh tokens, credit card data, autofill entries, and browsing history from major browsers (Chrome, Edge, Brave, Opera/Opera GX, Vivaldi, and Firefox). The report describes the two-component design (executable + DLL), the App‑Bound Encryption bypass for Chromium-based browsers using Early Bird APC DLL injection and the IElevator COM interface, DPAPI and NSS handling for other browsers, operational evasion techniques, a realistic attack scenario, and detection and mitigation recommendations for enterprise defenders.