Hacking Tools, Hacker News & Cyber Security

DumpBrowserSecrets is a publicly documented post-exploitation tool that harvests credentials and session data from major Windows browsers (Chromium-based browsers and Firefox). It bypasses Chrome's App-Bound Encryption by injecting a DLL into a spawned headless Chromium process to use the IElevator COM interface to decrypt encryption keys, and it retrieves DPAPI or NSS-protected secrets for other browsers. The tool outputs structured JSON, includes operational evasion features (string obfuscation, API hashing, PPID/argument spoofing, handle duplication, custom SQLite parsing), and is intended for red team assumed-breach testing but could be repurposed for malicious credential theft; the report also outlines detection and mitigation strategies.