Hacking Tools, Hacker News & Cyber Security

DumpBrowserSecrets is a publicly documented post‑exploitation credential‑harvesting tool that targets Chromium‑based and Gecko‑based browsers to extract cookies, saved logins, OAuth refresh tokens, credit card data, autofill entries, and history. It bypasses Chrome's App‑Bound Encryption by spawning a headless Chromium process and injecting a DLL to use the IElevator COM interface to decrypt the app_bound_encrypted_key, and uses DPAPI/NSS methods for other browsers; the tool includes operational evasion features and outputs structured JSON for use in red‑team or offensive scenarios. Detection opportunities include monitoring unexpected process injection into Chromium, headless browser instantiation by non‑browser processes, reads of browser SQLite files by non‑browser processes, and IElevator COM calls from non‑browser contexts; mitigations include using external credential managers and EDR rules targeting these behaviors.