Hacking Tools, Hacker News & Cyber Security

DumpBrowserSecrets is a publicly available post-exploitation tool that harvests browser-stored secrets from major Chromium- and Firefox-based browsers by bypassing App‑Bound Encryption (via DLL injection into a headless Chromium process using Early Bird APC and the IElevator COM interface) or by retrieving DPAPI/NSS keys; it extracts passwords, session cookies, OAuth refresh tokens, credit card data, autofill entries and history, includes multiple evasion features for EDRs, and is positioned for red-team assumed-breach testing but presents a high-risk capability if abused.