Hacking Tools, Hacker News & Cyber Security

DumpBrowserSecrets is a post-exploitation Windows tool that harvests browser-stored secrets (saved passwords, session cookies, OAuth refresh tokens, credit cards, autofill and history) from Chromium-based and Gecko-based browsers. It implements an App-Bound Encryption bypass for Chrome/Edge/Brave by injecting a DLL into a spawned headless Chromium process (Early Bird APC + IElevator COM) to decrypt the app_bound_encrypted_key, handles DPAPI-based browsers (Opera family/Vivaldi) and NSS-based Firefox logins, and includes operational evasion features; outputs are written as structured JSON for red-team or testing use and the report highlights detection and mitigation opportunities.