Hacking Tools, Hacker News & Cyber Security

DumpBrowserSecrets is a technical review of a Windows post‑exploitation credential‑harvesting tool that targets Chromium‑based and Firefox browsers to extract saved passwords, session cookies, OAuth refresh tokens, credit card data, autofill entries and history. It documents the tool's App‑Bound Encryption bypass (using a headless Chromium process, Early Bird APC DLL injection and the IElevator COM interface), DPAPI and NSS decryption approaches, operational evasion techniques (string obfuscation, API hashing, PPID/argument spoofing, file‑handle duplication), example attack scenarios, and detection/mitigation recommendations.