Hacking Tools, Hacker News & Cyber Security

DumpBrowserSecrets is a Windows post‑exploitation tool that harvests browser-stored credentials and session tokens from Chromium-based browsers and Firefox by bypassing App‑Bound Encryption (via DLL injection into a headless Chromium and the IElevator COM interface) or using DPAPI/NSS decryption; it outputs structured JSON, includes multiple evasion techniques (string obfuscation, API hashing, PPID/argument spoofing, file-handle duplication), and is positioned for red‑team assumed‑breach testing while being readily abusable by attackers targeting developer endpoints and SaaS sessions.