Hacking Tools, Hacker News & Cyber Security

DumpBrowserSecrets is a publicly documented post-exploitation tool that harvests browser-stored credentials and session tokens from Chromium-based browsers (including Chrome, Edge, Brave) and Firefox by using techniques such as headless Chromium spawning, Early Bird APC DLL injection, and the IElevator COM interface to bypass App-Bound Encryption, plus DPAPI/NSS handling for other browsers; the tool outputs structured JSON of recovered secrets and includes evasion features intended to reduce EDR detection, making it a high-risk utility for rapid credential theft and cloud account takeover in assumed-breach scenarios.