Hacking Tools, Hacker News & Cyber Security

DumpBrowserSecrets is a post‑exploitation credential-harvesting tool that extracts a wide range of browser-stored secrets (saved logins, session cookies, OAuth refresh tokens, credit cards, autofill data and history) across Chromium-based and Firefox browsers. It implements an App-Bound Encryption bypass for Chrome/Edge/Brave by spawning a headless Chromium process and injecting a DLL via Early Bird APC to use the IElevator COM interface, handles DPAPI and NSS models for other browsers, includes multiple evasion techniques, outputs structured JSON for red team use, and is presented as a tool to demonstrate realistic credential exposure on compromised developer endpoints.