Hacking Tools, Hacker News & Cyber Security

DumpBrowserSecrets is a post‑exploitation credential‑harvesting tool that targets major Windows browsers (Chrome/Brave/Edge, Opera family, Vivaldi, and Firefox) to extract saved passwords, session cookies, OAuth tokens, credit card data, autofill entries and history. It bypasses App‑Bound Encryption on Chromium browsers by spawning a headless Chromium process and injecting a DLL to use the IElevator COM interface, retrieves DPAPI or NSS keys where applicable, includes multiple operational evasion features, and outputs structured JSON for red team or adversary use; the report covers usage, detection opportunities, and mitigations.