Hacking Tools, Hacker News & Cyber Security

DumpBrowserSecrets is a post-exploitation credential-harvesting tool that targets major browsers (Chrome, Edge, Brave, Opera, Opera GX, Vivaldi, and Firefox) to extract saved logins, cookies, OAuth tokens, credit cards, autofill data and browsing history. It bypasses Chrome's App-Bound Encryption (Chrome 127+) by spawning a headless Chromium process and injecting a DLL via Early Bird APC to use the IElevator COM interface to decrypt the app_bound_encrypted_key, and uses DPAPI or NSS decryption for other browsers; the tool includes operational evasion features, outputs structured JSON, and is intended for red-team assumed-breach testing but represents a potent credential-theft capability.