Hacking Tools, Hacker News & Cyber Security

DumpBrowserSecrets is a Windows post‑exploitation tool for harvesting browser‑stored secrets (saved logins, session cookies, OAuth refresh tokens, credit cards, autofill, history, bookmarks) from Chromium‑based browsers and Firefox. It bypasses Chrome's App‑Bound Encryption by injecting a DLL into a headless Chromium process to call the IElevator COM interface, retrieves DPAPI or NSS keys as appropriate, and outputs structured JSON; the tool includes multiple evasion features (string obfuscation, API hashing, PPID/argument spoofing, file‑handle duplication, custom SQLite parsing). The report assesses red‑team relevance, attack scenarios (cloud account takeover, lateral movement), detection opportunities, and mitigation recommendations.