Hacking Tools, Hacker News & Cyber Security

DumpBrowserSecrets is a publicly documented post-exploitation tool that harvests browser-stored credentials and session tokens from major Chromium- and Gecko-based browsers on Windows. It implements an App-Bound Encryption bypass for Chrome/Edge/Brave via DLL injection into a headless Chromium process (using Early Bird APC and the IElevator COM interface), retrieves DPAPI keys for Opera-family browsers, and decrypts Firefox logins via NSS; outputs are structured JSON and the tool includes operational evasion features intended for red team use.