Hacking Tools, Hacker News & Cyber Security

DumpBrowserSecrets is a post‑exploitation credential‑harvesting tool that targets Chromium‑based and Gecko‑based browsers to extract saved credentials, cookies, OAuth tokens, credit card data, autofill and history by bypassing Chrome’s App‑Bound Encryption via DLL injection into a headless Chromium process (using the IElevator COM interface) and handling DPAPI/NSS models for other browsers; it produces structured JSON output, incorporates multiple EDR‑evasion techniques, and is positioned for red‑team assumed‑breach testing but poses a significant risk if used by malicious actors.