Hacking Tools, Hacker News & Cyber Security

DumpBrowserSecrets is a publicly described post‑exploitation utility that extracts browser‑stored credentials and session tokens from major Windows browsers (Chrome/Edge/Brave via an App‑Bound Encryption bypass, Opera/Vivaldi via DPAPI, and Firefox via NSS). The tool uses DLL injection into a headless Chromium process to access the IElevator COM interface and decrypt app_bound_encrypted_key, includes evasion techniques (string obfuscation, API hashing, PPID/argument spoofing, handle duplication, and a custom SQLite parser), outputs structured JSON of recovered secrets, and is intended for red‑team assumed‑breach scenarios but represents a realistic capability threat for credential theft and cloud account takeover if abused.