Hacking Tools, Hacker News & Cyber Security

DumpBrowserSecrets is a post-exploitation credential-harvesting tool that extracts passwords, session cookies, OAuth tokens, credit card data, autofill entries, and history from Chromium-based and Firefox browsers. It bypasses Chrome's App-Bound Encryption by launching a headless Chromium process, injecting a DLL via Early Bird APC to use the IElevator COM interface to decrypt keys, handles DPAPI and NSS decryption for other browsers, includes several evasion techniques (string obfuscation, API hashing, PPID/argument spoofing, handle duplication), outputs structured JSON, and is presented as a red-team tool but represents a high-risk capability for account takeover and lateral movement if used maliciously.