Hacking Tools, Hacker News & Cyber Security

DumpBrowserSecrets is a post‑exploitation browser credential‑harvesting tool for Windows that extracts saved passwords, cookies, OAuth refresh tokens, credit card data, autofill entries, and browsing history from Chromium‑based and Firefox browsers; it bypasses Chrome's App‑Bound Encryption by injecting a DLL into a headless Chromium process to use the IElevator COM interface, supports DPAPI and NSS decryption for other browsers, includes EDR‑evasion features (string obfuscation, API hashing, PPID/argument spoofing, Early Bird APC injection, handle duplication), and outputs structured JSON for red‑team use while providing detection and mitigation guidance.