Hacking Tools, Hacker News & Cyber Security

DumpBrowserSecrets is a publicly released Windows post-exploitation tool that harvests browser-stored credentials and tokens from major browsers (Chrome/Edge/Brave via an IElevator App-Bound Encryption bypass, Opera/Opera GX/Vivaldi via DPAPI, and Firefox via NSS). It uses headless Chromium with Early Bird APC DLL injection to decrypt app_bound_encrypted_key, parses browser SQLite/JSON stores, includes multiple evasion features (string obfuscation, API hashing, PPID/argument spoofing, file-handle duplication), and outputs structured JSON — making it useful for red-team validation but also a high-value capability for adversaries seeking cloud/SaaS account takeover.