Hacking Tools, Hacker News & Cyber Security

DumpBrowserSecrets is a public post‑exploitation credential‑harvesting tool that extracts saved passwords, session cookies, OAuth refresh tokens, credit card data and browsing history from major Chromium‑based browsers and Firefox; it bypasses Chrome's App‑Bound Encryption by injecting a DLL into a headless Chromium process to call the IElevator COM interface, supports DPAPI and NSS decryption for other browsers, outputs structured JSON, and includes evasion techniques aimed at reducing EDR detection—making it a high‑risk tool for enabling account takeover and lateral movement in compromised environments.