Hacking Tools, Hacker News & Cyber Security

DumpBrowserSecrets is a Windows post-exploitation credential-harvesting tool that targets Chromium- and Gecko-based browsers to extract passwords, cookies, OAuth tokens, credit card and autofill data by bypassing App-Bound Encryption (Chrome 127+) through headless Chromium process spawning and DLL injection using Early Bird APC and the IElevator COM interface; it also supports DPAPI and NSS decryption for other browsers, includes multiple evasion techniques, outputs structured JSON, and is intended for red team/assumed-breach use but poses a high-risk capability for real-world credential theft and lateral movement.