Hacking Tools, Hacker News & Cyber Security

DumpBrowserSecrets is a publicly available post-exploitation tool that harvests credentials and session material from major browsers (Chrome/Edge/Brave via an App‑Bound Encryption bypass using IElevator COM + DLL injection; Opera/Vivaldi via DPAPI keys; Firefox via NSS decryption). It targets developer and enterprise endpoints to recover session cookies, OAuth refresh tokens, saved logins, credit cards and autofill data, includes operational evasion (string obfuscation, API hashing, PPID/argument spoofing, file lock bypass), and is intended for red team assumed‑breach testing but represents a high-risk capability if used by attackers.