Hacking Tools, Hacker News & Cyber Security

DumpBrowserSecrets is a publicly available post-exploitation tool that harvests credentials and session tokens from major Windows browsers — handling Chrome/Brave/Edge via an App‑Bound Encryption (IElevator) bypass, Opera/Opera GX/Vivaldi via DPAPI, and Firefox via NSS — by spawning a headless Chromium process and injecting a DLL to decrypt keys, then parsing and decrypting on-disk browser stores. The tool includes operational evasion features, outputs structured JSON for red-team use, and poses a significant risk for cloud account takeover and lateral movement if used by adversaries against developer or enterprise endpoints.