Hacking Tools, Hacker News & Cyber Security

DumpBrowserSecrets is a precompiled Windows post-exploitation tool that harvests browser-stored secrets (saved passwords, session cookies, OAuth refresh tokens, credit cards, autofill data, history, and bookmarks) from Chrome, Edge, Brave, Opera (and variants), Vivaldi, and Firefox. It implements an App-Bound Encryption bypass for Chromium-based browsers by injecting a DLL into a spawned headless Chromium process and using the IElevator COM interface to decrypt keys, includes DPAPI and NSS handling for other browsers, and contains multiple operational evasion features; output is structured JSON for use by red teams or adversaries to enable rapid lateral movement and cloud account takeover.