Hacking Tools, Hacker News & Cyber Security

DumpBrowserSecrets is a post‑exploitation browser credential harvesting tool that extracts saved logins, cookies, OAuth tokens, credit cards, autofill data, and history from Chromium-based browsers (Chrome, Edge, Brave, Opera variants, Vivaldi) and Firefox. It bypasses Chrome's App‑Bound Encryption by injecting a DLL into a headless Chromium process to use the IElevator COM interface, handles DPAPI and NSS decryption for other browsers, includes multiple runtime evasion techniques, and outputs structured JSON suitable for red‑team or malicious use — enabling rapid cloud account/session takeover if a host is compromised.