Hacking Tools, Hacker News & Cyber Security

DumpBrowserSecrets is a publicly documented post‑exploitation credential harvesting tool that targets Chromium- and Gecko-based browsers to extract saved credentials, session cookies, OAuth refresh tokens, credit card data, autofill entries and history. It bypasses Chrome App‑Bound Encryption by spawning a headless Chromium process and injecting a DLL to use the IElevator COM interface, supports DPAPI and NSS decryption for other browsers, includes evasion features (string obfuscation, API hashing, PPID/argument spoofing, handle duplication), and is positioned for red-team/assumed-breach testing while highlighting detection and mitigation strategies.