Hacking Tools, Hacker News & Cyber Security

DumpBrowserSecrets is a publicly available post‑exploitation tool designed to harvest browser-stored secrets from major Windows browsers (Chrome/Edge/Brave via an App‑Bound Encryption bypass using IElevator, Opera/Vivaldi via DPAPI, and Firefox via NSS decryption). It injects a DLL into a headless Chromium process using Early Bird APC to decrypt app-bound keys, extracts cookies, saved logins, OAuth refresh tokens and other sensitive data, includes evasion techniques (string obfuscation, API hashing, PPID/argument spoofing, handle duplication, custom SQLite parser), and is intended for red team assumed‑breach testing but represents a high‑impact credential theft capability if used by real attackers.