Hacking Tools, Hacker News & Cyber Security

DumpBrowserSecrets is a post‑exploitation credential‑harvesting tool targeting major Chromium and Firefox browsers; it extracts saved passwords, session cookies, OAuth refresh tokens, credit card data, autofill entries, and history by using techniques including DLL injection (Early Bird APC), spawning headless Chromium to access the IElevator COM interface to decrypt App‑Bound Encryption keys, and DPAPI/NSS handling for other browsers. The report documents installation/usage, supported browsers, evasion features (string obfuscation, API hashing, PPID/argument spoofing, handle duplication), a realistic attack scenario for lateral/cloud takeover, detection opportunities (IElevator calls, unusual headless browser processes, reads of browser SQLite DBs), and mitigation guidance for enterprise defenders.