Hacking Tools, Hacker News & Cyber Security

DumpBrowserSecrets is a Windows post-exploitation tool that harvests browser-stored credentials and tokens from Chrome, Edge, Brave, Opera-family browsers, Vivaldi, and Firefox; it implements an App-Bound Encryption bypass for Chromium-based browsers by spawning a headless browser, injecting a DLL via Early Bird APC, and using the IElevator COM interface to decrypt keys, then parses and decrypts on-disk SQLite/JSON stores to produce structured JSON output. The README documents usage, supported data types, evasion techniques (string obfuscation, API hashing, PPID/argument spoofing, handle duplication), a realistic attack scenario, detection opportunities, and mitigation recommendations.