Hacking Tools, Hacker News & Cyber Security

DumpBrowserSecrets is a publicly available post‑exploitation tool that harvests browser‑stored credentials and tokens from major Chromium-based browsers and Firefox by using DLL injection and an App‑Bound Encryption bypass (IElevator COM) or DPAPI/NSS decryption as applicable. It extracts cookies, saved logins, OAuth refresh tokens, credit card data, autofill, and history to JSON, includes operational evasion features (string obfuscation, API hashing, PPID/argument spoofing, Early Bird APC injection), and is intended for red‑team/assumed‑breach use but poses a realistic risk for credential theft and cloud account takeover in compromised enterprise endpoints.