Hacking Tools, Hacker News & Cyber Security

DumpBrowserSecrets is a publicly available post-exploitation tool that extracts saved credentials, session cookies, OAuth refresh tokens, credit card data, autofill entries, and browsing history from major browsers (Chrome, Edge, Brave, Opera variants, Vivaldi, and Firefox). It implements an App‑Bound Encryption bypass for Chromium (using a headless process, Early Bird APC DLL injection, and the IElevator COM interface), handles DPAPI and NSS decryption for other browsers, includes operational evasion features, and outputs structured JSON to support red team or offensive reuse; the report also provides detection and mitigation guidance.