Hacking Tools, Hacker News & Cyber Security

DumpBrowserSecrets is a Windows post‑exploitation credential‑harvesting tool that extracts passwords, cookies, OAuth refresh tokens, credit cards and other browser‑stored secrets from Chromium‑ and Gecko‑based browsers by bypassing App‑Bound Encryption (via DLL injection into a headless Chromium process using Early Bird APC and the IElevator COM interface), as well as DPAPI and Firefox NSS; it includes operational evasion features and is intended for red‑team assumed‑breach testing but represents a significant risk for cloud account takeover and lateral movement if misused.