Hacking Tools, Hacker News & Cyber Security

DumpBrowserSecrets is a publicly documented post‑exploitation tool that harvests browser‑stored credentials (passwords, session cookies, OAuth tokens, credit cards, autofill, history) across Chrome, Edge, Brave, Opera variants, Vivaldi and Firefox. It bypasses Chrome's App‑Bound Encryption by spawning a headless Chromium instance and injecting a DLL to call the IElevator COM interface, uses DPAPI or NSS decryption where appropriate, includes multiple evasion techniques (string obfuscation, API hashing, PPID/argument spoofing, handle duplication), and outputs structured JSON useful for red teams and attackers to perform session replay and cloud account takeover scenarios; the report also outlines detection and mitigation strategies.