Hacking Tools, Hacker News & Cyber Security

DumpBrowserSecrets is a publicly available post-exploitation credential-extraction tool that targets Chromium- and Gecko-based browsers on Windows. It bypasses Chrome's App-Bound Encryption by spawning a headless Chromium process and injecting a DLL via Early Bird APC to call the IElevator COM interface, retrieves DPAPI or NSS-protected secrets for other browsers, and writes structured JSON output. The tool extracts saved credentials, session cookies, OAuth refresh tokens (which can enable cloud account takeover), credit card and autofill data, and includes operational evasion features; the report also outlines detection opportunities and mitigation guidance.