Hacking Tools, Hacker News & Cyber Security

DumpBrowserSecrets is a precompiled Windows post-exploitation tool that harvests browser-stored credentials and session tokens from Chrome, Edge, Brave, Opera variants, Vivaldi and Firefox by decrypting App-Bound Encryption (via an IElevator COM bypass in a headless Chromium process), DPAPI, or NSS-protected data; it includes DLL injection (Early Bird APC), evasion features (string obfuscation, API hashing, PPID/argument spoofing), outputs structured JSON, and includes detection and mitigation recommendations for defenders.