Hacking Tools, Hacker News & Cyber Security

DumpBrowserSecrets is a publicly documented post‑exploitation tool that extracts credentials, session cookies, OAuth refresh tokens, autofill data, credit cards, and browsing history from Chrome, Edge, Brave, Opera variants, Vivaldi, and Firefox. It implements an App‑Bound Encryption bypass for modern Chromium builds by spawning a headless Chromium process and injecting a DLL to use the IElevator COM interface, supports DPAPI and NSS decryption where applicable, includes multiple operational evasion features, and is intended for red‑team/assumed‑breach testing but materially increases risk of cloud account takeover and lateral movement on compromised developer workstations.