Hacking Tools, Hacker News & Cyber Security

DumpBrowserSecrets is a red-team oriented post-exploitation tool that harvests browser-stored secrets across major Windows browsers (Chrome/Edge/Brave via App-Bound Encryption bypass, Opera family via DPAPI, and Firefox via NSS decryption). It uses DLL injection into a headless Chromium process (Early Bird APC) to leverage the IElevator COM interface, includes evasion features (string obfuscation, API hashing, PPID/argument spoofing, handle duplication), outputs structured JSON, and is relevant for assessing credential exposure, detection efficacy, and enterprise mitigation strategies.