Hacking Tools, Hacker News & Cyber Security

DumpBrowserSecrets is a publicly available post‑exploitation tool that harvests browser-stored credentials and session tokens from Chrome, Edge, Brave, Opera family, Vivaldi, and Firefox by using DLL injection and the IElevator COM interface to bypass Chrome's App‑Bound Encryption (plus DPAPI and NSS handling for other browsers). It parses on-disk SQLite/JSON stores, outputs structured JSON, includes multiple runtime evasion techniques (string obfuscation, API hashing, PPID/argument spoofing, handle duplication), and is positioned for red-team assumed-breach testing but represents a high-risk infostealer capability enabling cloud account takeover and lateral movement.