Hacking Tools, Hacker News & Cyber Security

DumpBrowserSecrets is a publicly available post-exploitation tool that harvests browser-stored credentials and session tokens from major Chromium-based and Firefox browsers. It implements an App-Bound Encryption bypass for Chrome/Edge/Brave by spawning a headless browser and injecting a DLL to call the IElevator COM interface, and uses DPAPI/NSS decryption methods for other browsers. The report documents extracted data types, operational evasion features (string obfuscation, API hashing, PPID/argument spoofing, Early Bird APC injection), usage examples, detection opportunities, and mitigations, and positions the tool as a red‑team utility for testing credential exposure on compromised developer endpoints.