Hacking Tools, Hacker News & Cyber Security

DumpBrowserSecrets is a post-exploitation credential-harvesting tool that targets Chrome, Edge, Brave (App‑Bound Encryption), Opera/Opera GX/Vivaldi (DPAPI), and Firefox (NSS) to extract passwords, session cookies, OAuth refresh tokens, credit card data, autofill entries, history, and bookmarks and writes results as structured JSON; it bypasses Chrome's App‑Bound Encryption by spawning a headless Chromium process and injecting a DLL to call the IElevator COM interface, includes operational evasion (string obfuscation, API hashing, PPID/argument spoofing, handle duplication), and is presented as a red-team-oriented utility with detection and mitigation recommendations.