Hacking Tools, Hacker News & Cyber Security

**DumpBrowserSecrets** is a post‑exploitation credential‑harvesting tool from Maldev Academy that extracts passwords, cookies, OAuth refresh tokens, credit cards, autofill data, and history from major Windows browsers (Chromium-based and Firefox). It bypasses Chrome's App‑Bound Encryption by spawning a headless Chromium process and injecting a DLL via Early Bird APC to use the IElevator COM interface, supports DPAPI and NSS decryption for other browsers, includes operational evasion features, outputs structured JSON, and is positioned for red‑team/assumed‑breach testing while representing a high-risk capability for real-world credential theft.