Hacking Tools, Hacker News & Cyber Security

DumpBrowserSecrets is a post‑exploitation credential‑harvesting tool that targets major Chromium‑based browsers (Chrome, Edge, Brave, Opera variants, Vivaldi) and Firefox to extract saved passwords, session cookies, OAuth refresh tokens, credit card data, autofill entries, history and bookmarks into structured JSON. It implements an App‑Bound Encryption bypass for Chrome 127+ by spawning a headless Chromium process and injecting a DLL to use the IElevator COM interface to decrypt encryption keys, includes DPAPI and NSS handling for other browsers, and incorporates multiple evasion techniques (string obfuscation, API hashing, PPID/argument spoofing, handle duplication, custom SQLite parser) to improve operational stealth; the report also outlines detection signals and mitigations for enterprise defenders.