Hacking Tools, Hacker News & Cyber Security

DumpBrowserSecrets is a publicly documented post-exploitation tool that harvests browser-stored credentials and session tokens from Chrome, Edge, Brave, Opera-family browsers, Vivaldi, and Firefox. It implements an App-Bound Encryption bypass for modern Chromium builds by injecting a DLL into a headless browser process to access the IElevator COM interface, supports DPAPI and NSS decryption where applicable, outputs structured JSON, includes multiple operational evasion techniques, and is positioned for red-team use but could be abused for cloud account takeover and lateral movement.