Hacking Tools, Hacker News & Cyber Security

DumpBrowserSecrets is a Windows post-exploitation tool that extracts browser-stored secrets (saved credentials, session cookies, OAuth refresh tokens, credit card data, autofill, history, bookmarks) from major Chromium-based and Firefox browsers by bypassing App-Bound Encryption (via headless Chromium + DLL injection and IElevator COM decryption), DPAPI, and NSS protections; it includes operational evasion features, outputs structured JSON for red-team use, and is intended to test endpoint controls and credential blast radius.