Hacking Tools, Hacker News & Cyber Security

DumpBrowserSecrets is a publicly documented post-exploitation tool that harvests browser-stored secrets (saved credentials, session cookies, OAuth tokens, credit cards, autofill and history) from major Chromium- and Gecko-based browsers. It bypasses Chrome's App-Bound Encryption by injecting a DLL into a spawned headless Chromium process to use the IElevator COM interface, supports DPAPI and NSS decryption for other browsers, includes multiple evasion techniques, and outputs structured JSON suitable for red‑team use or malicious reuse.