Hacking Tools, Hacker News & Cyber Security

DumpBrowserSecrets is a publicly released post-exploitation tool that harvests browser-stored secrets (passwords, session cookies, OAuth tokens, credit cards, autofill, history) from Chromium-based and Firefox browsers; it bypasses Chrome App-Bound Encryption by injecting a DLL into a headless Chromium process to call the IElevator COM interface, supports DPAPI/NSS decryption for other browsers, and includes multiple evasion features designed to reduce EDR detection — making it a potent capability for lateral movement, cloud account takeover, and persistence in assumed-breach exercises or malicious operations.