Hacking Tools, Hacker News & Cyber Security

DumpBrowserSecrets is a Windows post-exploitation tool that harvests credentials and session tokens from Chromium-based and Firefox browsers by bypassing App-Bound Encryption (via spawning a headless Chromium, DLL injection using Early Bird APC, and the IElevator COM interface) and handling DPAPI/NSS where applicable; it outputs structured JSON and includes operational evasion features to reduce EDR detection, making it a potent enabler for lateral movement and cloud account takeover in assumed-breach scenarios.