Hacking Tools, Hacker News & Cyber Security

DumpBrowserSecrets is a publicly available post‑exploitation tool that harvests browser‑stored secrets (saved credentials, session cookies, OAuth refresh tokens, credit card data, autofill, and history) from major Chromium and Firefox browsers. It implements an App‑Bound Encryption bypass for Chrome/Edge/Brave by spawning a headless Chromium process and injecting a DLL to use the IElevator COM interface to decrypt keys, uses DPAPI extraction for Opera/Vivaldi family, and NSS decryption for Firefox, includes operational evasion (string obfuscation, API hashing, PPID/argument spoofing, Early Bird APC injection), and outputs structured JSON for use in red‑team or offensive operations; detection guidance and mitigations are provided.