Hacking Tools, Hacker News & Cyber Security

DumpBrowserSecrets is a post-exploitation tool that harvests browser-stored credentials and session tokens from Chrome, Edge, Brave, Opera-family browsers, Vivaldi, and Firefox. It bypasses App-Bound Encryption in Chromium browsers by spawning a headless process and injecting a DLL to use the IElevator COM interface to decrypt keys, and uses DPAPI or NSS handling where applicable; outputs structured JSON, includes evasion techniques (string obfuscation, API hashing, PPID/argument spoofing, Early Bird APC injection), and is intended for red-team assumed-breach testing but poses a high risk if used by malicious actors.