Hacking Tools, Hacker News & Cyber Security

DumpBrowserSecrets is a publicly released post‑exploitation tool that harvests browser‑stored secrets (saved logins, session cookies, OAuth refresh tokens, credit cards, autofill data, history and bookmarks) from major Chromium‑based browsers and Firefox. It implements an App‑Bound Encryption bypass for Chrome/Edge/Brave by spawning a headless Chromium, injecting a DLL via Early Bird APC to call the IElevator COM interface and retrieve decryption keys, handles DPAPI for Opera/Vivaldi, and NSS for Firefox; it includes multiple evasion techniques and outputs structured JSON for red‑team use while enabling realistic session replay and cloud account takeover scenarios.