Hacking Tools, Hacker News & Cyber Security

DumpBrowserSecrets is a publicly available post-exploitation tool that harvests browser-stored credentials and tokens from Chrome/Edge/Brave (including bypassing Chrome's App-Bound Encryption), Opera-family and Vivaldi (DPAPI), and Firefox (NSS). The report details its architecture (an executable plus an injected DLL), supported data types (cookies, saved logins, OAuth refresh tokens, credit cards, autofill, history), evasion techniques (string obfuscation, API hashing, PPID/argument spoofing, file-handle duplication), an operator attack scenario, and detection/mitigation recommendations.