Hacking Tools, Hacker News & Cyber Security

DumpBrowserSecrets is a publicly available post-exploitation tool that harvests browser-stored credentials and session tokens from Chromium-based and Firefox browsers by bypassing App-Bound Encryption (via headless Chromium + DLL injection using Early Bird APC and the IElevator COM interface) or extracting DPAPI/NSS-protected keys; it outputs structured JSON, includes operational evasion features (string obfuscation, API hashing, PPID/argument spoofing, handle duplication), and the report explains usage, detection opportunities (process injection, headless browser instantiation, reads of browser SQLite DBs, IElevator calls), and mitigation recommendations (use of external credential managers and EDR rules monitoring IElevator/headless browsers).