Hacking Tools, Hacker News & Cyber Security

DumpBrowserSecrets is a Windows post‑exploitation tool that harvests credentials and session material from major browsers (Chrome/Edge/Brave via an App‑Bound Encryption bypass, Opera/Vivaldi via DPAPI, and Firefox via NSS). It spawns a headless Chromium process and injects a DLL to use the IElevator COM interface to decrypt app_bound_encrypted_key, implements numerous operational evasion techniques (string obfuscation, API hashing, PPID/argument spoofing, Early Bird APC injection, handle duplication), outputs structured JSON, and is positioned as a red‑team utility for demonstrating the credential blast radius of compromised developer workstations while including detection and mitigation recommendations.