Hacking Tools, Hacker News & Cyber Security

DumpBrowserSecrets is a publicly available post‑exploitation tool that harvests credentials and session tokens from major browsers (Chrome, Edge, Brave, Opera variants, Vivaldi, and Firefox). It implements an App‑Bound Encryption bypass for Chromium builds (using Early Bird APC DLL injection and the IElevator COM interface), DPAPI/NSS decryption for other browsers, and several evasion techniques; outputs structured JSON and is positioned for red‑team/assumed‑breach use but poses clear theft and account takeover risks if used by adversaries.