Hacking Tools, Hacker News & Cyber Security

DumpBrowserSecrets is a publicly documented post‑exploitation tool that harvests browser-stored credentials and session artifacts from major Chromium-based browsers (Chrome, Edge, Brave, Opera variants, Vivaldi) and Firefox; it includes a specific bypass for Chrome's App-Bound Encryption by injecting a DLL into a headless Chromium process to use the IElevator COM interface, and uses DPAPI/NSS handling for other browsers. The tool outputs structured JSON, implements operational evasion (string obfuscation, API hashing, PPID/argument spoofing, handle duplication), and is presented as a red-team-friendly alternative to commodity infostealers—enabling rapid credential and OAuth token extraction that can facilitate lateral movement and cloud account takeover if misused.