Hacking Tools, Hacker News & Cyber Security

DumpBrowserSecrets is a publicly released post-exploitation tool that harvests browser-stored credentials and session tokens from major Chromium- and Gecko-based browsers on Windows, including a bypass for Chrome's App-Bound Encryption by injecting a DLL into a headless Chromium process to use the IElevator COM interface. The tool extracts cookies, saved logins, OAuth refresh tokens, credit card data, autofill entries, history, and bookmarks into JSON, incorporates EDR-evasion features (string obfuscation, API hashing, PPID/argument spoofing, file-handle duplication), and is presented as a red-team utility to test endpoint controls and the blast radius of compromised developer workstations.