Hacking Tools, Hacker News & Cyber Security

DumpBrowserSecrets is a publicly documented post‑exploitation tool that extracts browser‑stored secrets (cookies, saved passwords, OAuth refresh tokens, credit cards, autofill data, history, and bookmarks) from Chromium-based and Firefox browsers on Windows. It bypasses Chrome's App‑Bound Encryption by spawning a headless Chromium process and injecting a DLL to use the IElevator COM interface to decrypt encryption keys, includes DPAPI and NSS handling for other browsers, offers evasion techniques (string obfuscation, API hashing, PPID/argument spoofing, file-handle duplication), outputs structured JSON, and is positioned for red-team assumed‑breach testing while also representing a serious credential-theft capability if abused.