Hacking Tools, Hacker News & Cyber Security

DumpBrowserSecrets is a publicly available post-exploitation tool that harvests browser-stored secrets (saved passwords, session cookies, OAuth refresh tokens, credit cards, autofill, history, and bookmarks) from major Chromium-based browsers and Firefox. It bypasses Chrome's App-Bound Encryption by injecting a DLL into a headless Chromium process and using the IElevator COM interface to decrypt keys, leverages DPAPI/NSS decryption for other browsers, includes multiple operational evasion techniques, outputs structured JSON, and is positioned as a red-team capability for testing cloud account takeover and lateral movement risks.