Hacking Tools, Hacker News & Cyber Security

DumpBrowserSecrets is a Windows post-exploitation tool that harvests browser-stored credentials and session tokens from major Chromium-based browsers and Firefox by using a headless Chromium process with DLL injection to bypass App‑Bound Encryption (IElevator) or by extracting DPAPI/NSS secrets. It outputs structured JSON of cookies, saved logins, OAuth tokens, credit card data and autofill information, includes operational evasion features to reduce EDR detection, and is positioned for red-team/assumed-breach testing while demonstrating significant risk to cloud and SaaS account takeover.