Hacking Tools, Hacker News & Cyber Security

DumpBrowserSecrets is a post‑exploitation credential‑harvesting tool that targets Chromium‑based and Firefox browsers to extract saved credentials, session cookies, OAuth refresh tokens, credit card data, autofill entries, and history. It bypasses Chrome's App‑Bound Encryption (Chrome 127+) by spawning a headless Chromium process and injecting a DLL via Early Bird APC to use the IElevator COM interface, retrieves DPAPI keys for some browsers, and handles Firefox via NSS decryption; outputs are written as structured JSON and the tool includes operational evasion features intended for red‑team use.