Hacking Tools, Hacker News & Cyber Security

DumpBrowserSecrets is a post-exploitation credential-harvesting tool that targets Chrome, Edge, Brave (App-Bound Encryption), Opera/Vivaldi (DPAPI), and Firefox (NSS) to extract saved passwords, session cookies, OAuth refresh tokens, credit card data, autofill entries and browsing history. It bypasses Chromium App-Bound Encryption by spawning a headless browser and DLL injection using Early Bird APC to call the IElevator COM interface, includes multiple operational evasion features, and outputs structured JSON for use in red-team or adversary workflows. The report covers installation, usage, attack scenarios, detection opportunities, and mitigation recommendations.