Hacking Tools, Hacker News & Cyber Security

DumpBrowserSecrets is a publicly available post‑exploitation tool that harvests browser‑stored credentials and session tokens from major Chromium and Firefox browsers by spawning a headless browser and performing DLL injection to bypass App‑Bound Encryption (IElevator COM interface) or by extracting DPAPI/NSS keys; it outputs structured JSON and includes operational evasion features to reduce EDR detection, making it a high‑risk tool for account takeover and lateral movement in assumed‑breach scenarios.