Hacking Tools, Hacker News & Cyber Security

DumpBrowserSecrets is a publicly available post‑exploitation tool that harvests browser-stored credentials and session tokens from major browsers (Chrome, Edge, Brave, Opera, Opera GX, Vivaldi, and Firefox) by bypassing App‑Bound Encryption and DPAPI/NSS protections; it achieves this via headless Chromium process spawning, Early Bird APC DLL injection using the IElevator COM interface, and additional evasion techniques, producing structured JSON output for rapid credential reuse and session replay—posing a high-risk vector for account takeover and lateral movement in enterprise environments.