Hacking Tools, Hacker News & Cyber Security

DumpBrowserSecrets is a publicly released post-exploitation tool that harvests credentials and session tokens from major browsers (Chrome/Edge/Brave with App-Bound Encryption, Opera family with DPAPI, and Firefox with NSS). It uses a headless Chromium process with Early Bird APC DLL injection to leverage the IElevator COM interface for decrypting app-bound keys, includes multiple operational evasion techniques, outputs structured JSON, and is intended for red-team/assumed-breach testing but presents a high-impact credential-theft capability if used maliciously.