Hacking Tools, Hacker News & Cyber Security

DumpBrowserSecrets is a publicly available post-exploitation tool that extracts browser-stored secrets (saved logins, session cookies, OAuth tokens, credit cards, autofill data, history, and bookmarks) from major Chromium-based and Firefox browsers. It bypasses Chrome's App-Bound Encryption by spawning a headless Chromium process and injecting a DLL that uses the IElevator COM interface to decrypt keys, supports DPAPI and NSS decryption for other browsers, includes operational evasion techniques (string obfuscation, API hashing, PPID/argument spoofing, file-handle duplication), and outputs structured JSON for red-team use; the report includes usage examples, detection opportunities, and mitigation advice.