Hacking Tools, Hacker News & Cyber Security

DumpBrowserSecrets is a publicly available post-exploitation tool that harvests browser-stored credentials and session tokens across Chromium-based and Firefox browsers on Windows; it bypasses Chrome's App-Bound Encryption by injecting a DLL into a headless Chromium process to use the IElevator COM interface, supports DPAPI and NSS decryption for other browsers, and includes evasion techniques aimed at reducing EDR detection. The tool outputs structured JSON of recovered secrets, enabling rapid lateral movement and cloud account takeover in assumed-breach scenarios, and the report outlines detection opportunities and mitigation recommendations.