Hacking Tools, Hacker News & Cyber Security

DumpBrowserSecrets is a publicly documented post‑exploitation credential-harvesting tool targeting Chrome/Brave/Edge (via an App‑Bound Encryption bypass using a headless Chromium process and DLL injection), Opera/Vivaldi (DPAPI), and Firefox (NSS). It extracts cookies, saved logins, OAuth refresh tokens, credit card data, autofill entries, history and bookmarks to JSON, includes multiple EDR-evasion techniques (string obfuscation, API hashing, PPID/argument spoofing, Early Bird APC injection), and is positioned as a red team tool for assessing credential exposure and endpoint controls.