Hacking Tools, Hacker News & Cyber Security

DumpBrowserSecrets is a public post‑exploitation tool that harvests browser‑stored credentials and session tokens from major Chromium‑based and Gecko‑based browsers; it bypasses Chrome's App‑Bound Encryption by injecting a DLL into a headless Chromium process to access the IElevator COM interface, supports DPAPI and NSS decryption for other browsers, and includes multiple operational evasion features—making it a practical and high‑impact means to achieve lateral movement and SaaS account takeover from a single compromised Windows host.