Hacking Tools, Hacker News & Cyber Security

DumpBrowserSecrets is a publicly available post‑exploitation tool that harvests browser-stored credentials and session tokens from Chrome, Edge, Brave, Opera variants, Vivaldi, and Firefox. It implements an App‑Bound Encryption bypass for modern Chromium builds by injecting a DLL into a headless Chromium process and using the IElevator COM interface to decrypt keys, supports DPAPI and NSS decryption for other browsers, includes operational evasion techniques, and outputs structured JSON for red team or attacker use; the report also outlines detection and mitigation strategies.