Hacking Tools, Hacker News & Cyber Security

DumpBrowserSecrets is a compiled Windows post‑exploitation tool that harvests browser‑stored credentials and tokens (Chrome/Edge/Brave via App‑Bound Encryption bypass, Opera/Vivaldi via DPAPI, Firefox via NSS). It injects a DLL into a headless Chromium process to decrypt the app_bound_encrypted_key using the IElevator COM interface, extracts data from browser SQLite/JSON stores, includes evasion techniques (string obfuscation, API hashing, PPID/argument spoofing, handle duplication), and outputs structured JSON for red‑team or offensive use, exposing session cookies and OAuth tokens that enable rapid lateral movement and cloud account takeover.