Hacking Tools, Hacker News & Cyber Security

DumpBrowserSecrets is a publicly documented post‑exploitation tool designed to harvest browser‑stored credentials and session tokens from major Chromium‑based browsers and Firefox. It bypasses Chrome's App‑Bound Encryption by injecting a DLL into a headless Chromium process to call the IElevator COM interface, retrieves DPAPI or NSS secrets where appropriate, and outputs structured JSON containing passwords, cookies, OAuth tokens and other sensitive browser data; the report covers operational evasion, usage examples, detection opportunities and mitigation advice.