Hacking Tools, Hacker News & Cyber Security

DumpBrowserSecrets is a publicly available post‑exploitation tool that harvests credentials and session data across major Chromium- and Gecko-based browsers by using DLL injection into a headless Chromium process to bypass App-Bound Encryption (via the IElevator COM interface), retrieving DPAPI or NSS-protected secrets as needed; it outputs structured JSON and includes multiple evasion techniques to reduce EDR detection, making it highly relevant for red teams and for assessing the risk of browser-stored credentials enabling lateral movement and cloud account takeover.