Hacking Tools, Hacker News & Cyber Security

DumpBrowserSecrets is a publicly documented post‑exploitation tool that harvests browser‑stored credentials and tokens across Chromium‑based and Firefox browsers by using DLL injection and an App‑Bound Encryption (IElevator COM) bypass for modern Chrome/Edge/Brave, with DPAPI and NSS handling for other browsers; it outputs structured JSON and includes evasion techniques designed to reduce EDR detection, making it a high‑impact tool for lateral movement and cloud account takeover in assumed‑breach scenarios.