Hacking Tools, Hacker News & Cyber Security

DumpBrowserSecrets is a post-exploitation credential-harvesting tool that extracts saved passwords, session cookies, OAuth refresh tokens, credit card data, autofill entries and browsing history from major browsers (Chrome, Edge, Brave, Opera, Opera GX, Vivaldi, and Firefox) by bypassing App-Bound Encryption and DPAPI; it uses Early Bird APC DLL injection into a headless Chromium process and the IElevator COM interface to decrypt keys. The README documents usage, supported browsers, extracted data types, evasion features, an attack scenario and detection/mitigation advice, noting the tool is aimed at red-team assumed-breach exercises but can be abused by adversaries.