Hacking Tools, Hacker News & Cyber Security

DumpBrowserSecrets is a post-exploitation credential-harvesting tool that extracts browser-stored secrets (saved logins, session cookies, OAuth refresh tokens, credit cards, autofill data, and history) from Chromium-based browsers and Firefox. It implements an App-Bound Encryption bypass for Chrome/Edge/Brave by spawning a headless Chromium process and injecting a DLL via Early Bird APC to call the IElevator COM interface, supports DPAPI and NSS decryption for other browsers, includes multiple evasion techniques, outputs structured JSON, and is positioned for red-team assumed-breach testing while representing a significant credential-exfiltration risk if used by adversaries.