Hacking Tools, Hacker News & Cyber Security

DumpBrowserSecrets is a post‑exploitation credential‑harvesting tool for Windows that extracts saved passwords, session cookies, OAuth refresh tokens, credit card data, autofill entries, and browsing history from Chromium-based browsers and Firefox. It bypasses Chrome's App‑Bound Encryption by spawning a headless Chromium process, injecting a DLL via Early Bird APC to call the IElevator COM interface, and retrieving decryption keys (with DPAPI and NSS handling for other browsers); the tool includes operational evasion features and outputs structured JSON for red‑team use but can enable rapid cloud account takeover or lateral movement if abused.