Hacking Tools, Hacker News & Cyber Security

DumpBrowserSecrets is a post-exploitation credential-harvesting tool that retrieves browser-stored secrets (passwords, cookies, OAuth refresh tokens, credit cards, autofill data, history and bookmarks) from Chromium-based browsers and Firefox. It bypasses Chrome's App-Bound Encryption by injecting a DLL into a headless Chromium process to call the IElevator COM interface, uses DPAPI or NSS where applicable, includes multiple evasion techniques for EDR avoidance, and is presented with usage examples, detection opportunities, and mitigation guidance for defenders.