Hacking Tools, Hacker News & Cyber Security

DumpBrowserSecrets is a post‑exploitation credential‑harvesting tool that targets major Windows browsers (Chrome/Edge/Brave via App‑Bound Encryption bypass, Opera/Vivaldi via DPAPI, and Firefox via NSS) to extract passwords, session cookies, OAuth tokens, credit cards, autofill data and history. It uses headless Chromium spawning with DLL injection (Early Bird APC) to call the IElevator COM interface and decrypt app_bound_encrypted_key, includes multiple evasion techniques to reduce EDR detection, outputs structured JSON, and is positioned for red‑team/assumed‑breach testing while representing a high‑impact capability if abused.