Hacking Tools, Hacker News & Cyber Security

DumpBrowserSecrets is a post‑exploitation credential-harvesting tool designed to extract saved credentials, session cookies, OAuth refresh tokens, credit card data and browsing history from major Windows browsers (Chrome, Edge, Brave, Opera variants, Vivaldi, and Firefox). It implements an App‑Bound Encryption bypass for Chromium-based browsers by spawning a headless Chromium process and injecting a DLL via Early Bird APC to use the IElevator COM interface to decrypt keys, handles DPAPI and NSS models for other browsers, and includes multiple evasion features; the report covers usage, detection opportunities, and mitigation recommendations for enterprise defenders.