Hacking Tools, Hacker News & Cyber Security

DumpBrowserSecrets is a publicly documented post‑exploitation tool that harvests browser‑stored secrets (saved passwords, session cookies, OAuth refresh tokens, credit cards, autofill and history) from Chrome, Edge, Brave, Opera variants, Vivaldi and Firefox. It implements an App‑Bound Encryption bypass for Chromium browsers by spawning a headless Chromium process, injecting a DLL via Early Bird APC to leverage the IElevator COM interface, and decrypting keys for offline SQLite parsing; it also includes DPAPI/NSS handling, multiple evasion features, and writes structured JSON output for red‑team or operator use.