Hacking Tools, Hacker News & Cyber Security

DumpBrowserSecrets is a Windows post-exploitation tool that harvests credentials and session material from major browsers (Chrome, Edge, Brave, Opera variants, Vivaldi, and Firefox). It bypasses Chrome's App‑Bound Encryption by injecting a DLL into a headless Chromium process to call the IElevator COM interface, retrieves DPAPI or NSS-protected keys for other browsers, and writes extracted cookies, saved logins, OAuth tokens, credit cards, autofill data, and history to structured JSON. The report covers usage, evasion techniques (string obfuscation, API hashing, PPID/argument spoofing, handle duplication, custom SQLite parsing), detection opportunities, and red-team relevance.