Hacking Tools, Hacker News & Cyber Security

DumpBrowserSecrets is a Windows post‑exploitation tool that extracts browser-stored credentials and session tokens (cookies, OAuth refresh tokens, saved logins, credit cards, autofill and history) from major Chromium-based and Firefox browsers. It implements a Chrome App‑Bound Encryption bypass by injecting a DLL into a headless Chromium process to use the IElevator COM interface, supports DPAPI and NSS decryption for other browsers, includes operational evasion features (string obfuscation, API hashing, PPID/argument spoofing, file-handle duplication), and writes structured JSON output for red‑team or attacker use; the report also describes detection points and mitigation recommendations.