Hacking Tools, Hacker News & Cyber Security

DumpBrowserSecrets is a publicly available post-exploitation tool that harvests browser-stored credentials and session tokens from major Chromium-based browsers and Firefox by bypassing App-Bound Encryption (via IElevator COM when injected into a headless Chromium process), DPAPI, and NSS; it outputs structured JSON and includes operational evasion techniques, making it valuable for red teams and high-risk if weaponized by adversaries.