Hacking Tools, Hacker News & Cyber Security

DumpBrowserSecrets is a publicly documented post-exploitation tool that harvests browser-stored secrets (saved credentials, session cookies, OAuth refresh tokens, credit cards, autofill entries and history) from Chrome, Edge, Brave, Opera, Opera GX, Vivaldi and Firefox. It implements an App‑Bound Encryption bypass for Chromium browsers by injecting a DLL into a headless Chromium process (Early Bird APC + IElevator COM) to decrypt keys, includes DPAPI and NSS handling for other browsers, and provides operational evasion features and structured JSON output for red‑team or adversary use — the report covers capabilities, usage, detection indicators, and mitigations.