Hacking Tools, Hacker News & Cyber Security

DumpBrowserSecrets is a publicly documented post‑exploitation tool that harvests saved credentials, session cookies, OAuth refresh tokens, credit card data, autofill entries, and history from Chrome, Edge, Brave, Opera variants, Vivaldi, and Firefox on Windows. It bypasses Chrome’s App‑Bound Encryption by injecting a DLL into a spawned headless Chromium process to call the IElevator COM interface, retrieves DPAPI or NSS keys where applicable, and writes structured JSON output; the tool includes multiple evasion techniques intended to reduce EDR detection and is intended for red team assumed‑breach testing but presents a significant real-world credential theft capability.