Hacking Tools, Hacker News & Cyber Security

DumpBrowserSecrets is a post-exploitation credential-harvesting tool that targets major browsers (Chrome, Edge, Brave, Opera family, Vivaldi, Firefox) to extract saved passwords, cookies, OAuth refresh tokens, credit card data, autofill and history. It implements an App-Bound Encryption bypass for Chromium-based browsers by injecting a DLL into a spawned headless Chromium process to use the IElevator COM interface, includes DPAPI and NSS handling for other browsers, and incorporates evasion techniques (string obfuscation, API hashing, PPID/argument spoofing, file-handle duplication) to reduce EDR detection; the report includes usage, detection opportunities, mitigations, and a red-team attack scenario.