Hacking Tools, Hacker News & Cyber Security

DumpBrowserSecrets is a post‑exploitation tool that harvests credentials and session material from major Windows browsers (Chrome, Edge, Brave, Opera variants, Vivaldi, and Firefox) by bypassing App‑Bound Encryption (via spawning a headless Chromium and using an injected DLL with the IElevator COM interface), DPAPI, and NSS protections; it extracts cookies, saved logins, OAuth tokens, credit cards, autofill data and history into JSON, includes several evasion techniques (string obfuscation, API hashing, PPID/argument spoofing, file-handle duplication), and is presented as a red‑team utility with guidance on detection and mitigation.