Hacking Tools, Hacker News & Cyber Security

DumpBrowserSecrets is a publicly available Windows post-exploitation tool that harvests credentials and session tokens from Chrome, Edge, Brave, Opera, Vivaldi and Firefox by combining a compiled executable with a DLL injected into a headless Chromium process to bypass App‑Bound Encryption (via the IElevator COM interface) or by extracting DPAPI/NSS-protected secrets. The report details its extraction capabilities (cookies, saved logins, OAuth refresh tokens, credit cards, autofill, history), operational evasion techniques (string obfuscation, API hashing, PPID/argument spoofing, handle duplication, custom SQLite parser), usage guidance, red‑team relevance, and detection/mitigation recommendations.