Hacking Tools, Hacker News & Cyber Security

DumpBrowserSecrets is a post-exploitation credential-harvesting tool for Windows that extracts saved passwords, session cookies, OAuth refresh tokens, credit card data, autofill entries and history from major browsers (Chrome/Edge/Brave, Opera variants, Vivaldi, and Firefox). It implements an App-Bound Encryption bypass for Chromium-based browsers by spawning a headless Chromium process and injecting a DLL to use the IElevator COM interface to decrypt keys, includes DPAPI/NSS handling for other browsers, and contains operational evasion features—making it a high-risk tool for lateral movement and cloud account takeover in enterprise environments.