Hacking Tools, Hacker News & Cyber Security

DumpBrowserSecrets is a Windows post‑exploitation tool (executable + DLL) that harvests credentials and session data from major browsers (Chrome/Edge/Brave via an App‑Bound Encryption bypass using a headless Chromium and IElevator injection; Opera/Vivaldi via DPAPI; Firefox via NSS decryption). It includes operational evasion (string obfuscation, API hashing, PPID/argument spoofing, handle duplication, custom SQLite parsing), outputs structured JSON, completes extraction rapidly, and is intended for red‑team testing but poses a significant risk if abused by adversaries.