Hacking Tools, Hacker News & Cyber Security

DumpBrowserSecrets is a publicly available post-exploitation tool designed to extract browser-stored credentials and session tokens from Windows hosts. It supports Chromium-based browsers (Chrome, Edge, Brave) by bypassing App-Bound Encryption via headless process spawning and DLL injection (Early Bird APC + IElevator COM), and also handles DPAPI-based browsers (Opera, Vivaldi) and Firefox (NSS) to produce structured JSON exports of passwords, cookies, OAuth tokens, credit cards, autofill data, and history; the report includes operational usage, evasion features, and detection/mitigation recommendations.