Hacking Tools, Hacker News & Cyber Security

DumpBrowserSecrets is a post-exploitation browser credential extraction tool that targets Chromium- and Gecko-based browsers to retrieve saved passwords, session cookies, OAuth refresh tokens, credit card data, autofill entries, and browsing history. It implements an App-Bound Encryption bypass for Chrome/Brave/Edge by spawning a headless Chromium process and injecting a DLL via Early Bird APC to use the IElevator COM interface, handles DPAPI for Opera-family browsers, and uses NSS decryption for Firefox; the tool includes multiple evasion features and outputs structured JSON for red-team use and testing detection controls.