Hacking Tools, Hacker News & Cyber Security

DumpBrowserSecrets is a Windows post‑exploitation tool that harvests saved passwords, session cookies, OAuth refresh tokens, credit card numbers, autofill data, and browsing history from Chromium‑based browsers (Chrome, Edge, Brave, Opera variants, Vivaldi) and Firefox. It bypasses Chrome's App‑Bound Encryption by spawning a headless Chromium process and injecting a DLL to call the IElevator COM interface, retrieves DPAPI or NSS keys as needed, and writes structured JSON output; the tool also includes evasion features (string obfuscation, API hashing, PPID/argument spoofing, handle duplication) and guidance for detection and mitigation.