Hacking Tools, Hacker News & Cyber Security

DumpBrowserSecrets is a publicly documented post‑exploitation tool that harvests browser-stored credentials and session tokens from Chromium-based and Firefox browsers by spawning a headless browser, injecting a DLL to use the IElevator COM interface to decrypt App‑Bound Encryption keys (for Chrome/Edge/Brave) or retrieving DPAPI/NSS keys for other browsers, and parsing on-disk SQLite/JSON stores. The tool extracts cookies, OAuth refresh tokens, saved logins, credit cards, autofill data and history into structured JSON, includes multiple evasion techniques (string obfuscation, API hashing, PPID/argument spoofing, Early Bird APC injection, handle duplication, custom SQLite parser), and is positioned for red-team assumed-breach testing while also representing a high-risk credential-theft capability if used maliciously.