Hacking Tools, Hacker News & Cyber Security

DumpBrowserSecrets is a post‑exploitation credential‑harvesting tool that targets Chromium‑based and Firefox browsers on Windows, implementing an IElevator COM bypass via DLL injection into a headless Chromium process to decrypt App‑Bound Encryption keys and using DPAPI/NSS handling for other browsers; it extracts cookies, saved logins, OAuth refresh tokens, credit card data, autofill entries and history into JSON for rapid lateral movement or cloud account takeover and includes operational evasion features aimed at reducing EDR detection.