Hacking Tools, Hacker News & Cyber Security

DumpBrowserSecrets is a publicly documented post-exploitation tool designed to extract browser-stored secrets from Chromium-based browsers (including Chrome, Edge, Brave, Opera variants, Vivaldi) and Firefox. It bypasses Chrome's App-Bound Encryption by injecting a DLL into a headless Chromium process via Early Bird APC to use the IElevator COM interface, handles DPAPI and NSS decryption as needed, outputs structured JSON, includes operational evasion techniques (string obfuscation, API hashing, PPID/argument spoofing, handle duplication), and is intended for red-team assumed-breach testing but can enable rapid lateral movement and cloud account takeover if misused.