Hacking Tools, Hacker News & Cyber Security

DumpBrowserSecrets is a publicly available post-exploitation tool that harvests browser-stored credentials and session tokens from Chrome, Edge, Brave, Opera, Vivaldi and Firefox by bypassing App‑Bound Encryption (for Chromium-based browsers) and using DPAPI/NSS decryption for others; it injects a DLL into a headless Chromium process via Early Bird APC to call the IElevator COM interface, returns decrypted keys, parses on-disk SQLite/JSON stores, and outputs structured JSON for red-team use—enabling rapid account takeover and lateral movement if abused.