Hacking Tools, Hacker News & Cyber Security

DumpBrowserSecrets is a Windows post‑exploitation tool that harvests browser-stored credentials and session material (saved logins, cookies, OAuth refresh tokens, credit cards, autofill data, history and bookmarks) across major Chromium-based browsers and Firefox. It implements an App-Bound Encryption bypass for Chromium (spawning a headless Chromium process and injecting a DLL to use the IElevator COM interface), handles DPAPI and NSS decryption for other browsers, and includes operational evasion features; the repository documents usage, output in JSON, detection opportunities, and red-team use cases.