Hacking Tools, Hacker News & Cyber Security

DumpBrowserSecrets is a precompiled Windows post-exploitation tool that harvests browser-stored secrets (saved logins, session cookies, OAuth refresh tokens, credit cards, autofill, history, and bookmarks) from Chromium-based and Firefox browsers. It implements an App-Bound Encryption bypass for Chrome/Edge/Brave via spawning a headless Chromium process and injecting a DLL that uses the IElevator COM interface (Early Bird APC injection), handles DPAPI for Opera-family browsers, and uses NSS decryption for Firefox; it also includes multiple evasion features and outputs structured JSON for red-team use.