Hacking Tools, Hacker News & Cyber Security

DumpBrowserSecrets is a public post‑exploitation tool that harvests browser-stored credentials and session tokens from major Windows browsers by bypassing App‑Bound Encryption (via spawning a headless Chromium and using IElevator through DLL injection), retrieving DPAPI keys, and handling Firefox NSS decryption; it outputs structured JSON and includes evasion features intended for red team use but which can be abused for cloud account takeover and lateral movement.