Hacking Tools, Hacker News & Cyber Security

DumpBrowserSecrets is a post-exploitation credential-harvesting tool that extracts passwords, session cookies, OAuth tokens, credit card data, autofill entries, and browsing history from major Windows browsers (Chromium-based browsers and Firefox). It implements a DLL injection into a headless Chromium process to bypass Chrome's App‑Bound Encryption via the IElevator COM interface (and uses DPAPI or NSS methods where applicable), includes evasion features to reduce EDR detection, outputs structured JSON, and is intended for red-team/assumed-breach testing but presents a high-risk capability for real-world account takeover and lateral movement if misused.