Hacking Tools, Hacker News & Cyber Security

DumpBrowserSecrets is a Windows post‑exploitation tool that harvests browser‑stored secrets (saved passwords, cookies, OAuth refresh tokens, credit cards, autofill entries, history, bookmarks) from Chromium‑based and Firefox browsers by bypassing App‑Bound Encryption via the IElevator COM interface through Early Bird APC DLL injection; it also handles DPAPI and NSS encrypted stores, outputs structured JSON, and includes multiple evasion features to reduce EDR detection, making it a potent capability for credential theft and SaaS/cloud account takeover from compromised developer endpoints.