Hacking Tools, Hacker News & Cyber Security

DumpBrowserSecrets is a Windows post‑exploitation tool that extracts saved credentials, session cookies, OAuth refresh tokens, credit cards, autofill entries and browsing history from Chrome/Edge/Brave (App‑Bound Encryption bypass), Opera/Opera GX/Vivaldi (DPAPI), and Firefox (NSS). It spawns a headless Chromium process and injects a DLL to use the IElevator COM interface to decrypt app_bound_encrypted_key, includes file-lock bypass and other EDR‑evasion features, and outputs structured JSON — making it a high‑risk capability for account takeover and lateral movement when run on compromised developer or user workstations.