Hacking Tools, Hacker News & Cyber Security

DumpBrowserSecrets is a Windows post-exploitation tool that harvests browser-stored credentials (passwords, cookies, OAuth refresh tokens, credit cards, autofill, history, bookmarks) from major Chromium-based browsers and Firefox by combining a compiled executable with a DLL that is injected into a headless Chromium process to bypass App-Bound Encryption via the IElevator COM interface; it supports DPAPI and NSS decryption for other browsers, includes multiple evasion techniques, outputs structured JSON, and is positioned for red-team assumed-breach testing while also demonstrating a high-risk capability adversaries could reuse.