Hacking Tools, Hacker News & Cyber Security

DumpBrowserSecrets is a publicly released post‑exploitation tool that harvests browser-stored credentials and session tokens from major Chromium-based and Firefox browsers. It implements an App‑Bound Encryption bypass (using a headless Chromium process, DLL injection via Early Bird APC, and the IElevator COM interface) plus DPAPI and NSS handling for other browsers, outputs structured JSON, and includes evasion features intended for red-team use; the capability enables rapid lateral movement and cloud account takeover from a compromised Windows host.