Hacking Tools, Hacker News & Cyber Security

DumpBrowserSecrets is a post-exploitation browser credential harvester that extracts saved passwords, session cookies, OAuth refresh tokens, credit card details, autofill data and browsing history from Chrome, Edge, Brave, Opera (and forks), Vivaldi and Firefox. It bypasses Chrome's App-Bound Encryption by spawning a headless Chromium process and injecting a DLL (Early Bird APC + IElevator COM) to decrypt the app_bound_encrypted_key, includes DPAPI and NSS handling for other browsers, and implements operational evasion techniques; output is written as structured JSON for red-team or adversary use.