Hacking Tools, Hacker News & Cyber Security

DumpBrowserSecrets is a publicly available post‑exploitation tool that harvests browser‑stored credentials and session data across Chrome, Edge, Brave, Opera variants, Vivaldi, and Firefox; it includes an App‑Bound Encryption bypass for Chromium browsers (using headless process spawn + DLL injection and the IElevator COM interface) and extracts cookies, saved logins, OAuth refresh tokens, credit cards, autofill data, and history into JSON output. The report describes operational evasion features (string obfuscation, API hashing, PPID/argument spoofing, handle duplication), an example attack scenario demonstrating rapid cloud/SaaS account takeover potential, and detection/mitigation recommendations focused on monitoring IElevator usage, headless browser instantiation, and restricting browser-stored secrets.