Hacking Tools, Hacker News & Cyber Security

DumpBrowserSecrets is a post-exploitation credential-harvesting tool that extracts saved credentials, session cookies, OAuth tokens, credit card data and browsing artifacts from major browsers (Chrome, Edge, Brave, Opera, Opera GX, Vivaldi and Firefox). It bypasses Chrome's App-Bound Encryption by spawning a headless Chromium instance and injecting a DLL to use the IElevator COM interface, handles DPAPI and NSS decryption for other browsers, and includes operational evasion features (string obfuscation, API hashing, PPID/argument spoofing, handle duplication). The report describes usage, output (JSON), attack scenarios (rapid cloud account/session takeover), detection opportunities (process injection, IElevator calls, unexpected reads of browser SQLite DBs) and mitigations (use of external credential managers, EDR monitoring of COM calls and headless browser behavior).