Hacking Tools, Hacker News & Cyber Security

DumpBrowserSecrets is a red-team post‑exploitation tool that extracts browser‑stored secrets (saved credentials, session cookies, OAuth refresh tokens, credit cards, autofill data, history, and bookmarks) from major Chromium and Firefox browsers. It implements an App‑Bound Encryption bypass for Chrome/Brave/Edge by spawning a headless Chromium process and injecting a DLL to call the IElevator COM interface, plus DPAPI/NSS handling for other browsers, and includes multiple operational evasion techniques to reduce EDR detection.