Hacking Tools, Hacker News & Cyber Security

DumpBrowserSecrets is a post‑exploitation credential‑harvesting tool that extracts saved logins, session cookies, OAuth refresh tokens, credit card data, autofill entries, and browsing history from Chromium‑based and Firefox browsers on Windows. It implements an App‑Bound Encryption bypass for Chrome/Brave/Edge by spawning a headless Chromium process and injecting a DLL via Early Bird APC to use the IElevator COM interface, handles DPAPI and NSS models for other browsers, outputs structured JSON, and includes evasion features aimed at red‑team or offensive use; the report covers usage, attack scenarios, detection opportunities, and mitigations.