Hacking Tools, Hacker News & Cyber Security

DumpBrowserSecrets is a publicly documented post-exploitation tool that harvests browser-stored credentials and session tokens from Chrome/Edge/Brave (including App-Bound Encryption bypass via IElevator COM), Opera/Vivaldi (DPAPI), and Firefox (NSS). It combines a compiled executable and an injected DLL to decrypt and export cookies, saved logins, OAuth refresh tokens, credit card data, autofill entries, and history to JSON, includes operational evasion techniques (string obfuscation, API hashing, PPID/argument spoofing, file-lock bypass), and is presented as a red-team utility for assessing credential exposure on compromised Windows developer endpoints.