Hacking Tools, Hacker News & Cyber Security

DumpBrowserSecrets is a publicly available post-exploitation tool that harvests browser-stored credentials and session tokens across major Chromium-based and Firefox browsers. It bypasses Chrome's App-Bound Encryption by spawning a headless Chromium process and injecting a DLL to call the IElevator COM interface, supports DPAPI and NSS decryption for other browsers, and includes operational evasion techniques; the tool outputs structured JSON of recovered secrets and is presented as a red-team capability with detection and mitigation guidance.