Hacking Tools, Hacker News & Cyber Security

DumpBrowserSecrets is a publicly available post-exploitation tool that harvests credentials and session data from major Windows browsers (Chrome, Edge, Brave, Opera variants, Vivaldi, and Firefox). It bypasses Chrome's App-Bound Encryption by spawning a headless Chromium process and injecting a DLL to use the IElevator COM interface, extracts DPAPI and NSS-protected secrets where applicable, and outputs structured JSON. The report covers operational features (string obfuscation, API hashing, PPID/argument spoofing, file-handle duplication), recommended detection opportunities (monitor IElevator calls, headless browser instantiation, unauthorized reads of browser SQLite files), and mitigation advice (use external credential managers and EDR rules targeting these behaviors).