Hacking Tools, Hacker News & Cyber Security

DumpBrowserSecrets is a post-exploitation credential-harvesting tool targeting major browsers (Chrome, Edge, Brave, Opera, Opera GX, Vivaldi, Firefox). It extracts saved credentials, session cookies, OAuth refresh tokens, credit card data, autofill entries and history; for Chromium-based browsers it bypasses App-Bound Encryption by injecting a DLL into a headless Chromium process to call the IElevator COM interface, and it includes multiple evasion features (string obfuscation, API hashing, PPID/argument spoofing, custom SQLite parser), making it a potent tool for lateral movement and cloud account takeover on compromised Windows hosts.