Hacking Tools, Hacker News & Cyber Security

DumpBrowserSecrets is a post‑exploitation credential‑harvesting tool that extracts saved logins, session cookies, OAuth refresh tokens, credit card data, autofill entries, history, and bookmarks from Chrome, Edge, Brave, Opera variants, Vivaldi, and Firefox. The tool implements an App‑Bound Encryption bypass for Chromium browsers by spawning a headless Chromium process and injecting a DLL via Early Bird APC to use the IElevator COM interface to decrypt the app_bound_encrypted_key; it also supports DPAPI and NSS decryption paths, includes multiple runtime evasion techniques, and outputs structured JSON for red‑team use, enabling rapid lateral movement and cloud account takeovers if deployed on a compromised host.