Hacking Tools, Hacker News & Cyber Security

DumpBrowserSecrets is a publicly documented post-exploitation tool that harvests stored browser secrets (saved passwords, session cookies, OAuth refresh tokens, credit card data, autofill, history, bookmarks) from Chromium-based browsers and Firefox on Windows. It implements an App‑Bound Encryption bypass for Chrome/Edge/Brave by spawning a headless Chromium process, injecting a DLL via Early Bird APC to call the IElevator COM interface to decrypt the app_bound_encrypted_key, and uses DPAPI/NSS handling for other browsers; outputs structured JSON and includes multiple operational evasion features. The report outlines usage, extracted data types, detection opportunities (process injection, IElevator calls, headless browser instantiation, non-browser access to Login Data/Cookies/Web Data), and mitigations such as using external credential managers and EDR policies that monitor the IElevator interface and headless browser behavior.