Hacking Tools, Hacker News & Cyber Security

DumpBrowserSecrets is a publicly documented post‑exploitation tool that harvests browser-stored credentials and session material from major Chromium and Firefox browsers by spawning a headless Chromium process and injecting a DLL to bypass App‑Bound Encryption (IElevator COM) or by extracting DPAPI/NSS keys; it outputs structured JSON of cookies, saved logins, OAuth refresh tokens, credit cards, autofill data, and history, and includes evasion techniques (string obfuscation, API hashing, PPID/argument spoofing, handle duplication, custom SQLite parser) to reduce detection by EDR.