Hacking Tools, Hacker News & Cyber Security

DumpBrowserSecrets is a post-exploitation credential-harvesting tool for Windows that extracts saved passwords, session cookies, OAuth refresh tokens, credit card numbers, autofill data, and history from Chromium-based browsers (including Chrome/Edge/Brave using an App-Bound Encryption bypass) and Firefox (using NSS decryption). The report documents the executable + DLL design, Early Bird APC DLL injection into a headless Chromium process to use the IElevator COM interface to decrypt app_bound_encrypted_key, DPAPI and NSS handling for other browsers, operational evasion features, usage examples, an attack scenario demonstrating cloud account takeover potential, and recommended detection and mitigation approaches.