Hacking Tools, Hacker News & Cyber Security

DumpBrowserSecrets is a public post-exploitation tool that harvests browser-stored credentials and session material from major Chromium- and Gecko-based browsers. It bypasses Chrome's App-Bound Encryption by spawning a headless Chromium process and injecting a DLL to use the IElevator COM interface, retrieves DPAPI or NSS-protected secrets for other browsers, outputs structured JSON with cookies, OAuth tokens, saved logins and autofill data, and includes multiple evasion techniques aimed at EDRs. The report details usage, attack scenarios, detection opportunities, and mitigations for defenders.