Hacking Tools, Hacker News & Cyber Security

DumpBrowserSecrets is a publicly available post‑exploitation tool that harvests browser-stored credentials and session tokens from Chrome, Edge, Brave, Opera variants, Vivaldi, and Firefox on Windows. It implements an App‑Bound Encryption bypass for Chromium browsers by spawning a headless browser and performing Early Bird APC DLL injection to call the IElevator COM interface, retrieves DPAPI or NSS-protected secrets where applicable, and outputs structured JSON; the tool includes multiple evasion techniques and is useful for red teams and adversaries aiming for rapid cloud and SaaS credential takeover.