Hacking Tools, Hacker News & Cyber Security

DumpBrowserSecrets is a Windows post‑exploitation tool that harvests browser-stored credentials across Chromium-based browsers (Chrome, Edge, Brave, Opera variants, Vivaldi) and Firefox; it bypasses Chrome's App-Bound Encryption by spawning a headless Chromium process, injecting a DLL via Early Bird APC to use the IElevator COM interface, and decrypts or reads on-disk SQLite/JSON stores to extract cookies, OAuth refresh tokens, saved logins, credit cards, autofill, history and bookmarks, outputting results as JSON. The report describes operational evasion features (string obfuscation, API hashing, PPID/argument spoofing, handle duplication, custom SQLite parser), attack scenarios, red-team relevance, and detection/mitigation opportunities.