Hacking Tools, Hacker News & Cyber Security

DumpBrowserSecrets is a post-exploitation credential-harvesting tool that targets browser-stored secrets across Chrome, Edge, Brave (via App-Bound Encryption bypass), Opera/Opera GX/Vivaldi (DPAPI), and Firefox (NSS). The tool uses a compiled executable plus a DLL injected into a headless Chromium process (Early Bird APC) to obtain decrypted keys via the IElevator COM interface, and includes evasion techniques (string obfuscation, API hashing, PPID/argument spoofing, handle duplication, custom SQLite parser). It outputs structured JSON of recovered credentials and session tokens, enabling rapid lateral movement or cloud account takeover in assumed-breach scenarios, and the report outlines detection and mitigation strategies.