Hacking Tools, Hacker News & Cyber Security

DumpBrowserSecrets is a publicly available post-exploitation tool that harvests saved credentials, session cookies, OAuth refresh tokens, credit card data and browsing artifacts from Chrome, Edge, Brave, Opera, Vivaldi and Firefox; it bypasses Chrome's App-Bound Encryption by spawning a headless Chromium process and injecting a DLL via Early Bird APC to call the IElevator COM interface, supports DPAPI and NSS decryption for other browsers, includes evasion features (string obfuscation, API hashing, PPID/argument spoofing, file-handle duplication), and outputs structured JSON for red-team or adversary use while the report provides usage examples, attack scenarios, and detection/mitigation recommendations.