Hacking Tools, Hacker News & Cyber Security

DumpBrowserSecrets is a post-exploitation credential-harvesting tool that targets Chrome, Edge, Brave (App‑Bound Encryption bypass via injected DLL and IElevator COM), Opera/Vivaldi (DPAPI), and Firefox (NSS) to extract saved passwords, cookies, OAuth refresh tokens, credit cards, autofill data, and history into structured JSON; the report describes its technical design, evasion techniques (string obfuscation, API hashing, PPID/argument spoofing, Early Bird APC injection), usage scenarios, detection opportunities, and mitigation recommendations for red-team and defensive testing.