Hacking Tools, Hacker News & Cyber Security

DumpBrowserSecrets is a publicly released post‑exploitation tool that harvests credentials and session data from major browsers (Chrome, Edge, Brave, Opera family, Vivaldi, Firefox). It implements an IElevator COM bypass via early‑boot APC DLL injection into a headless Chromium process to decrypt App‑Bound Encryption keys (Chrome 127+), retrieves DPAPI or NSS keys where applicable, and outputs structured JSON; the tool includes operational evasion techniques and is aimed at red‑team/assumed‑breach scenarios but increases real-world risk by enabling rapid account takeover and lateral movement if misused.