Hacking Tools, Hacker News & Cyber Security

DumpBrowserSecrets is a Windows post-exploitation tool that harvests browser-stored credentials (passwords, cookies, OAuth tokens, credit cards, autofill and history) across Chrome, Edge, Brave, Opera-family browsers, Vivaldi and Firefox. It bypasses Chromium App‑Bound Encryption by injecting a DLL into a headless Chromium process and invoking the IElevator COM interface, supports DPAPI and NSS decryption for other browsers, includes multiple evasion techniques (string obfuscation, API hashing, PPID/argument spoofing, handle duplication), and outputs structured JSON for red‑team or offensive use while also listing detection and mitigation guidance.