Hacking Tools, Hacker News & Cyber Security

DumpBrowserSecrets is a publicly available post‑exploitation tool that harvests browser‑stored credentials and session tokens from Chromium‑based and Gecko‑based browsers by using DLL injection (Early Bird APC) and an IElevator COM-based App‑Bound Encryption bypass for Chrome/Edge/Brave, DPAPI retrieval for Opera/Vivaldi, and NSS decryption for Firefox; it outputs structured JSON and includes multiple evasion techniques designed to reduce EDR detection, making it a potent capability for lateral movement and cloud account takeover in assumed‑breach scenarios.