Hacking Tools, Hacker News & Cyber Security

DumpBrowserSecrets is a publicly available Windows post-exploitation tool that harvests browser-stored secrets (saved logins, cookies, OAuth tokens, credit cards, autofill, history, bookmarks) from major Chromium- and Firefox-based browsers. It implements a DLL-injection-based IElevator COM bypass to decrypt Chrome's App-Bound Encryption keys, handles DPAPI and NSS models for other browsers, includes evasion techniques (string obfuscation, API hashing, PPID/argument spoofing, file-handle duplication), outputs structured JSON, and is positioned as a red-team utility to demonstrate realistic credential exposure and cloud account takeover risk.