Hacking Tools, Hacker News & Cyber Security

DumpBrowserSecrets is a Windows post-exploitation tool that harvests browser-stored credentials and session tokens from major Chromium-based and Firefox browsers by using techniques including headless Chromium spawning, Early Bird APC DLL injection to leverage the IElevator COM interface (bypassing Chrome's App-Bound Encryption), DPAPI key retrieval, and NSS decryption for Firefox; it outputs structured JSON and includes evasion features such as string obfuscation, API hashing, PPID/argument spoofing, and custom SQLite parsing, making it highly relevant for red teams and misused by adversaries to enable lateral movement and cloud account takeover from compromised developer workstations.