Hacking Tools, Hacker News & Cyber Security

DumpBrowserSecrets is a publicly documented post‑exploitation tool that harvests browser‑stored secrets (saved logins, session cookies, OAuth refresh tokens, credit cards, autofill, history, bookmarks) from major Chromium‑based and Firefox browsers; it bypasses Chrome's App‑Bound Encryption by spawning a headless Chromium process and injecting a DLL to call the IElevator COM interface, includes DPAPI and NSS handling for other browsers, and implements multiple operational evasion techniques—making it a high‑risk capability for lateral movement and cloud account takeover on compromised Windows hosts.