Hacking Tools, Hacker News & Cyber Security

DumpBrowserSecrets is a Windows post-exploitation tool that harvests browser-stored credentials and session tokens from Chrome/Edge/Brave (via an App-Bound Encryption bypass using headless Chromium, DLL injection, and the IElevator COM interface), Opera/Vivaldi (DPAPI), and Firefox (NSS); it outputs structured JSON, includes operational evasion features (string obfuscation, API hashing, PPID/argument spoofing, handle duplication, custom SQLite parser), and is intended for red-team/assumed-breach testing but materially enables lateral movement and cloud account takeover if used by an operator.