Hacking Tools, Hacker News & Cyber Security

DumpBrowserSecrets is a publicly documented post‑exploitation tool that harvests browser‑stored secrets (cookies, saved logins, OAuth refresh tokens, credit cards, autofill data, history, bookmarks) from Chrome, Edge, Brave, Opera family, Vivaldi and Firefox. It bypasses Chrome’s App‑Bound Encryption by spawning a headless Chromium process and injecting a DLL that uses the IElevator COM interface to decrypt the app_bound_encrypted_key, includes DPAPI and NSS handling for other browsers, and implements operational evasion techniques (string obfuscation, API hashing, PPID/argument spoofing, handle duplication, custom SQLite parsing). The report outlines attack scenarios (fast credential extraction enabling SaaS account takeover and lateral movement), red team relevance, detection opportunities, and mitigations such as using dedicated credential managers and monitoring IElevator calls and unexpected headless browser processes.