Hacking Tools, Hacker News & Cyber Security

DumpBrowserSecrets is a Windows post-exploitation tool that harvests browser-stored credentials and session material (passwords, cookies, OAuth tokens, credit cards, autofill, history) from Chromium- and Firefox-based browsers by using DLL injection into a spawned headless Chromium process to bypass App-Bound Encryption (IElevator COM) and by extracting DPAPI/NSS-protected data for other browsers; it includes operational evasion features, produces structured JSON output, and is distributed as precompiled binaries, making it a practical high-risk capability for lateral movement and cloud account takeover.