Hacking Tools, Hacker News & Cyber Security

DumpBrowserSecrets is a post-exploitation credential exfiltration tool that targets major browsers (Chrome, Edge, Brave, Opera family, Vivaldi, Firefox) to extract saved logins, session cookies, OAuth refresh tokens, credit cards, autofill data and history; it bypasses Chromium App-Bound Encryption by spawning a headless Chromium process and injecting a DLL via Early Bird APC to use the IElevator COM interface, includes DPAPI/NSS handling for other browsers, and implements multiple evasion techniques—intended for red-team testing but representing a high-risk credential-theft capability for enterprise endpoints.