Hacking Tools, Hacker News & Cyber Security

DumpBrowserSecrets is a publicly documented post-exploitation tool that harvests browser-resident credentials from major Windows browsers (Chrome/Edge/Brave via App‑Bound Encryption bypass using IElevator and DLL injection; Opera/Vivaldi via DPAPI; Firefox via NSS decryption). It outputs structured JSON of cookies, saved logins, OAuth refresh tokens, credit cards, autofill and history, includes operational evasion features (string obfuscation, API hashing, PPID/argument spoofing, Early Bird APC injection, file-handle duplication), and is positioned for red-team use but represents a realistic offensive capability for lateral movement and cloud account takeover; the report also outlines detection and mitigation opportunities.