Hacking Tools, Hacker News & Cyber Security

DumpBrowserSecrets is a publicly released post‑exploitation tool that harvests credentials and session tokens from major Windows browsers (Chrome/Edge/Brave with App‑Bound Encryption, Opera/Vivaldi via DPAPI, and Firefox via NSS). It uses a DLL injected into a headless Chromium process to decrypt app_bound_encrypted_key via the IElevator COM interface, includes multiple operational evasion techniques (string obfuscation, API hashing, PPID/argument spoofing, handle duplication), outputs structured JSON, and is intended for red‑team assumed‑breach testing while also representing a realistic attacker capability for cloud account takeover and lateral movement.