Hacking Tools, Hacker News & Cyber Security

DumpBrowserSecrets is a precompiled Windows post‑exploitation tool that harvests browser‑stored credentials and session tokens from major browsers (Chrome/Edge/Brave via an App‑Bound Encryption bypass, Opera/Vivaldi via DPAPI, and Firefox via NSS). It injects a DLL into a headless Chromium process to decrypt app_bound_encrypted_key through the IElevator COM interface, supports evasion features (string obfuscation, API hashing, PPID/argument spoofing, handle duplication), outputs structured JSON, and is positioned for red‑team/assumed‑breach assessments while presenting a realistic high‑impact credential theft risk for defenders to detect and mitigate.