Hacking Tools, Hacker News & Cyber Security

DumpBrowserSecrets is a publicly-available post-exploitation tool that harvests browser-stored credentials and tokens from major browsers (Chrome/Edge/Brave via App-Bound Encryption bypass, Opera/Vivaldi via DPAPI, and Firefox via NSS). It uses headless Chromium DLL injection (Early Bird APC) and the IElevator COM interface to decrypt app-bound keys, supports handle duplication to read locked SQLite files, and outputs structured JSON of extracted cookies, saved logins, OAuth refresh tokens, credit cards, autofill data and history—making it a high-value primitive for lateral movement and cloud account takeover in assumed-breach exercises.