Hacking Tools, Hacker News & Cyber Security

DumpBrowserSecrets is a public post-exploitation tool that harvests browser-stored credentials and session tokens from major Windows browsers (Chrome/Edge/Brave via App-Bound Encryption bypass, Opera/Vivaldi via DPAPI, Firefox via NSS). It uses DLL injection into a headless Chromium process to decrypt app-bound keys, parses on-disk SQLite/JSON stores, provides evasion features (string obfuscation, API hashing, PPID/argument spoofing, handle duplication), and outputs structured JSON suitable for red team or malicious use; the report includes attack scenarios, detection indicators, and mitigation recommendations.