Hacking Tools, Hacker News & Cyber Security

DumpBrowserSecrets is a publicly available post-exploitation credential-harvesting tool that targets major Windows browsers (Chrome, Edge, Brave, Opera variants, Vivaldi, and Firefox). It bypasses Chrome’s App-Bound Encryption by spawning a headless Chromium process and injecting a DLL to call the IElevator COM interface, extracts DPAPI and NSS-protected secrets where applicable, and outputs structured JSON containing cookies, OAuth tokens, saved logins, credit cards, autofill entries and history; the report describes technical operation, evasion features, detection opportunities, and mitigation recommendations for red teams and defenders.