Hacking Tools, Hacker News & Cyber Security

DumpBrowserSecrets is a publicly documented post-exploitation tool designed to harvest browser-stored credentials and session tokens from major Chromium- and Gecko-based browsers; it uses DLL injection into a headless Chromium process to bypass App‑Bound Encryption (via the IElevator COM interface), retrieves DPAPI keys or NSS secrets for other browsers, and outputs structured JSON of cookies, saved logins, OAuth tokens, credit cards, autofill data and history. The report details the tool's architecture, evasion techniques (string obfuscation, API hashing, PPID/argument spoofing, handle duplication), usage examples, detection opportunities, and red-team relevance.