Hacking Tools, Hacker News & Cyber Security

DumpBrowserSecrets is a post‑exploitation credential-extraction tool that targets Chrome, Edge, Brave (App‑Bound Encryption), Opera/Opera GX/Vivaldi (DPAPI) and Firefox (NSS) to harvest cookies, saved logins, OAuth tokens, credit card data, autofill and history by spawning headless browser processes, injecting a DLL via Early Bird APC to leverage the IElevator COM interface (for App‑Bound Encryption bypass), and parsing/decrypting on-disk browser stores; the report covers usage, evasion techniques, attack scenarios, detection opportunities, and mitigation recommendations.