Hacking Tools, Hacker News & Cyber Security

DumpBrowserSecrets is a post-exploitation credential-harvesting tool that targets Chromium-based browsers (Chrome, Edge, Brave, Opera variants, Vivaldi) and Firefox to extract saved passwords, session cookies, OAuth refresh tokens, credit card data, autofill entries, history, and bookmarks. The report describes the tool's App-Bound Encryption bypass (injecting a DLL into a headless Chromium process to use the IElevator COM interface), DPAPI/NSS handling for other browsers, operational evasion techniques, detection opportunities, and recommended mitigations to reduce credential exposure.