Hacking Tools, Hacker News & Cyber Security

DumpBrowserSecrets is a post‑exploitation tool that harvests browser‑stored credentials and tokens from major Chromium‑based browsers (including Chrome, Edge, Brave) and Firefox by bypassing App‑Bound Encryption via a DLL injected into a headless Chromium process using Early Bird APC and the IElevator COM interface; it also handles DPAPI and NSS decryption for other browsers, outputs structured JSON, and includes operational evasion features. The report covers capabilities, supported browsers, usage examples, detection opportunities, and mitigations for defenders.