Hacking Tools, Hacker News & Cyber Security

DumpBrowserSecrets is a Windows post-exploitation tool that harvests credentials and session material from major browsers (Chrome, Edge, Brave, Opera family, Vivaldi, Firefox). It bypasses Chrome's App‑Bound Encryption by injecting a DLL into a headless Chromium process to call the IElevator COM interface, retrieves DPAPI or NSS secrets for other browsers, and outputs structured JSON of cookies, saved logins, OAuth refresh tokens, autofill, and history; the report covers operational evasion, usage, detection opportunities, and mitigations.