Hacking Tools, Hacker News & Cyber Security

DumpBrowserSecrets is a publicly available post-exploitation tool designed to extract browser-stored credentials and session tokens from major Windows browsers (Chrome, Edge, Brave, Opera family, Vivaldi, and Firefox). It implements an App-Bound Encryption bypass for Chromium-based browsers by injecting a DLL into a headless Chromium process to use the IElevator COM interface, handles DPAPI and NSS-encrypted stores for other browsers, and includes several evasion features; the tool outputs structured JSON suitable for red team use but can enable real account takeover and lateral movement if abused.