Hacking Tools, Hacker News & Cyber Security

DumpBrowserSecrets is a publicly available post‑exploitation tool that extracts browser‑stored secrets (saved logins, session cookies, OAuth refresh tokens, credit cards, autofill data, history, bookmarks) from Chromium‑based browsers and Firefox on Windows; it bypasses Chrome's App‑Bound Encryption by injecting a DLL into a headless Chromium process to use the IElevator COM interface and handles DPAPI and NSS encryption models for other browsers. The report documents technical implementation, operational evasion techniques (string obfuscation, API hashing, PPID/argument spoofing, handle duplication), usage examples and attack scenarios (cloud account takeover, lateral movement), and provides detection and mitigation recommendations for defenders.