Hacking Tools, Hacker News & Cyber Security

DumpBrowserSecrets is a publicly available post-exploitation tool that harvests browser-stored credentials and session tokens from major Windows browsers (Chrome, Edge, Brave, Opera variants, Vivaldi, and Firefox). It implements an App-Bound Encryption bypass for modern Chromium builds by injecting a DLL into a headless Chromium process to use the IElevator COM interface, retrieves DPAPI or NSS secrets where applicable, and outputs structured JSON; the tool includes multiple operational evasion features and is intended for red-team/assumed-breach testing but presents clear risk if used by adversaries.