Hacking Tools, Hacker News & Cyber Security

DumpBrowserSecrets is a Windows post-exploitation tool that harvests browser-stored credentials and session tokens across Chromium-based and Firefox browsers by spawning a headless browser and injecting a DLL to bypass App-Bound Encryption (via the IElevator COM interface) or by extracting DPAPI/NSS-protected keys; it outputs structured JSON and includes multiple operational evasion techniques, making it useful for red teams and relevant to adversaries seeking rapid SaaS/cloud account takeover from compromised developer workstations.