Hacking Tools, Hacker News & Cyber Security

DumpBrowserSecrets is a publicly available post‑exploitation tool that harvests browser‑stored credentials from Chrome, Edge, Brave, Opera/Opera GX, Vivaldi, and Firefox by using DLL injection into a headless Chromium process to bypass App‑Bound Encryption (IElevator COM) or by directly decrypting DPAPI/NSS keys. It extracts session cookies, OAuth refresh tokens, saved passwords, credit card numbers and autofill data, includes multiple evasion techniques to reduce EDR detection, and outputs structured JSON for red‑team or adversary use; the report also provides detection and mitigation recommendations.