Hacking Tools, Hacker News & Cyber Security

DumpBrowserSecrets is a publicly documented post-exploitation tool designed to harvest browser-stored credentials and session tokens from major Windows browsers (Chrome/Brave/Edge, Opera variants, Vivaldi, and Firefox). It bypasses Chrome's App-Bound Encryption by injecting a DLL into a headless Chromium process to use the IElevator COM interface, extracts DPAPI- and NSS-protected secrets where applicable, outputs structured JSON for operators, and includes several evasion techniques intended to reduce EDR detection; the report includes usage examples, detection opportunities, and mitigation recommendations.