Hacking Tools, Hacker News & Cyber Security

DumpBrowserSecrets is a post-exploitation credential-harvesting tool that targets major Windows browsers (Chrome/Brave/Edge via App-Bound Encryption bypass, Opera/Vivaldi via DPAPI, and Firefox via NSS) to extract saved passwords, session cookies, OAuth refresh tokens, credit cards, autofill data, and history. The tool uses headless Chromium process spawning and Early Bird APC DLL injection to obtain decrypted keys (via the IElevator COM interface), includes multiple evasion techniques, outputs structured JSON for operators, and is intended for red-team/assumed-breach testing while representing a realistic risk vector for cloud/SaaS account takeover.