Hacking Tools, Hacker News & Cyber Security

DumpBrowserSecrets is a public post‑exploitation tool that harvests browser‑stored credentials and session tokens from Chromium‑based browsers (including Chrome, Edge, Brave) and Firefox. It implements an App‑Bound Encryption bypass for Chrome 127+ by spawning a headless Chromium process and injecting a DLL to invoke the IElevator COM interface, supports DPAPI and NSS decryption where applicable, and includes operational evasion features; the report covers extracted data types, usage, attack scenarios, detection opportunities, and mitigation advice.