Hacking Tools, Hacker News & Cyber Security

DumpBrowserSecrets is a Windows post-exploitation tool that harvests browser-stored credentials and session tokens from Chromium-based and Firefox browsers by using DLL injection into a headless Chromium process to bypass App‑Bound Encryption, DPAPI extraction for other Chromium forks, and NSS decryption for Firefox. The README-style report outlines supported browsers and data types (passwords, cookies, OAuth tokens, credit cards, autofill, history), implementation and evasion techniques (Early Bird APC injection, IElevator COM use, string obfuscation, PPID/argument spoofing, custom SQLite parser), operational usage examples, detection opportunities, and mitigation recommendations for enterprise environments.