Hacking Tools, Hacker News & Cyber Security

DumpBrowserSecrets is a publicly available Windows post-exploitation tool that harvests browser-stored credentials and session artifacts (passwords, cookies, OAuth tokens, credit cards, autofill, history) from Chrome/Edge/Brave (App-Bound Encryption bypass), Opera/Opera GX/Vivaldi (DPAPI), and Firefox (NSS). It uses DLL injection into a headless Chromium process to decrypt app_bound_encrypted_key via the IElevator COM interface, includes operational evasion techniques to evade EDR, outputs structured JSON for red team use, and poses a high-risk capability enabling cloud account takeover and lateral movement if used by malicious actors.