Hacking Tools, Hacker News & Cyber Security

DumpBrowserSecrets is a post‑exploitation credential‑harvesting tool targeting major Windows browsers (Chrome/Edge/Brave via App‑Bound Encryption bypass, Opera/Vivaldi via DPAPI, and Firefox via NSS). It spawns a headless browser, injects a DLL to use the IElevator COM interface to decrypt app_bound_encrypted_key for Chromium builds, extracts SQLite/JSON stored secrets (passwords, cookies, OAuth tokens, credit cards, autofill, history), and writes structured JSON output; the report also documents evasion techniques, an attack scenario demonstrating cloud account/session takeover risks, and guidance for detection and mitigation.