Hacking Tools, Hacker News & Cyber Security

DumpBrowserSecrets is a post-exploitation credential-harvesting tool for Windows that targets Chromium- and Gecko-based browsers; it bypasses Chrome's App-Bound Encryption by injecting a DLL into a headless Chromium process to use the IElevator COM interface and extracts cookies, saved logins, OAuth tokens, credit cards, autofill data, and history across Chrome, Edge, Brave, Opera-family, Vivaldi, and Firefox. The report details implementation, evasion techniques, attack scenarios, and detection and mitigation opportunities for defenders.