Hacking Tools, Hacker News & Cyber Security

DumpBrowserSecrets is a publicly documented post‑exploitation tool that extracts browser‑stored secrets (saved logins, session cookies, OAuth refresh tokens, credit cards, autofill, history, bookmarks) from Chromium‑based and Firefox browsers on Windows. It bypasses Chrome's App‑Bound Encryption by spawning a headless Chromium instance and injecting a DLL to use the IElevator COM interface to decrypt app_bound_encrypted_key, uses DPAPI extraction for some Chromium forks and NSS handling for Firefox, includes multiple evasion techniques (string obfuscation, API hashing, PPID/argument spoofing, handle duplication, custom SQLite parser), and is presented as a red‑team oriented tool with guidance on detection and mitigation.