Hacking Tools, Hacker News & Cyber Security

DumpBrowserSecrets is a post-exploitation credential-harvesting tool that targets major browsers (Chrome/Edge/Brave via App‑Bound Encryption bypass, Opera/Vivaldi via DPAPI, and Firefox via NSS) to extract saved passwords, session cookies, OAuth refresh tokens, credit card data, autofill, and browsing history. It uses headless Chromium process spawning, Early Bird APC DLL injection, and the IElevator COM interface to decrypt app_bound_encrypted_key for Chromium-based browsers, and includes multiple evasion techniques intended for red team or offensive use; output is structured JSON suitable for session replay or credential validation.