Hacking Tools, Hacker News & Cyber Security

DumpBrowserSecrets is a publicly available post‑exploitation tool that extracts browser-stored credentials and session material (passwords, cookies, OAuth tokens, credit cards, autofill, history, bookmarks) from Chromium-based browsers (including Chrome, Edge, Brave, Opera variants, Vivaldi) and Firefox. It bypasses Chrome's App‑Bound Encryption by spawning a headless Chromium process and injecting a DLL via Early Bird APC to call the IElevator COM interface, uses DPAPI and NSS handling where appropriate, and includes multiple evasion techniques; output is structured JSON for red-team use and testing of endpoint controls.