Hacking Tools, Hacker News & Cyber Security

DumpBrowserSecrets is a publicly available post-exploitation credential-harvesting tool that extracts saved passwords, session cookies, OAuth refresh tokens, credit card data, autofill entries and browsing history from major Chromium- and Gecko-based browsers; it bypasses Chrome's App-Bound Encryption by injecting a DLL into a headless Chromium process to use the IElevator COM interface and retrieve decryption keys for local SQLite/JSON stores. The report describes supported browsers (Chrome, Edge, Brave, Opera, Opera GX, Vivaldi, Firefox), extraction outputs, operational evasion features (string obfuscation, API hashing, Early Bird APC injection, PPID/argument spoofing, handle duplication, custom SQLite parser), a representative attack scenario, detection opportunities, and mitigation recommendations.