Hacking Tools, Hacker News & Cyber Security

DumpBrowserSecrets is a publicly released post-exploitation tool that harvests browser-stored credentials and tokens from Chromium-based and Firefox browsers. It bypasses Chrome's App-Bound Encryption by spawning a headless Chromium process and injecting a DLL that leverages the IElevator COM interface, supports DPAPI and NSS decryption for other browsers, outputs structured JSON, and includes operational evasion features (string obfuscation, API hashing, PPID/argument spoofing, file-handle duplication). The capability enables rapid account takeover and lateral movement from a single compromised developer workstation and therefore represents a high-risk credential-exfiltration technique for enterprise environments.