Hacking Tools, Hacker News & Cyber Security

DumpBrowserSecrets is a publicly available post‑exploitation tool that harvests browser‑stored credentials and session tokens from major Chromium-based browsers (including Chrome, Edge, Brave) and Firefox. It implements an App‑Bound Encryption bypass for Chrome 127+ by spawning a headless Chromium process and injecting a DLL to call the IElevator COM interface, plus DPAPI and NSS handling for other browsers. The tool outputs structured JSON, includes operational evasion techniques (string obfuscation, API hashing, PPID/argument spoofing, file-handle duplication, custom SQLite parser), and is presented as a red-team utility for assessing credential exposure and cloud account takeover risk on compromised developer workstations.