Hacking Tools, Hacker News & Cyber Security

DumpBrowserSecrets is a post‑exploitation credential‑harvesting tool for Windows that extracts saved passwords, session cookies, OAuth refresh tokens, credit card data, autofill and history from major Chromium‑based browsers and Firefox. It implements an App‑Bound Encryption bypass (spawning a headless Chromium process, injecting a DLL via Early Bird APC, and calling the IElevator COM interface) to decrypt browser-stored secrets, includes DPAPI/NSS handling for other browsers, and incorporates operational evasion features; the output is structured JSON intended for red team or adversary use.