Hacking Tools, Hacker News & Cyber Security

DumpBrowserSecrets is a publicly available post-exploitation tool that extracts browser-stored credentials and session data from major Chromium-based and Firefox browsers. It implements an App‑Bound Encryption bypass for Chrome/Edge/Brave by spawning a headless Chromium process and injecting a DLL to use the IElevator COM interface, handles DPAPI-protected browsers (Opera, Vivaldi) and NSS-encrypted Firefox logins, and outputs structured JSON. The report describes operational evasion (string obfuscation, API hashing, PPID/argument spoofing, handle duplication), typical attack scenarios (developer workstation compromise leading to SaaS/cloud account takeover), and recommended detection/mitigation approaches.