Hacking Tools, Hacker News & Cyber Security

DumpBrowserSecrets is a Windows post-exploitation tool that harvests browser-stored credentials and session artifacts from Chromium-based browsers (Chrome, Edge, Brave, Opera variants, Vivaldi) and Firefox. It bypasses Chrome's App-Bound Encryption by spawning a headless Chromium process and injecting a DLL to call the IElevator COM interface, retrieves and decrypts encrypted keys (or uses DPAPI/NSS where applicable), parses on-disk SQLite/JSON stores, and outputs structured JSON of recovered secrets; the report also covers evasion techniques, detection opportunities, and mitigation recommendations.