Hacking Tools, Hacker News & Cyber Security

DumpBrowserSecrets is a publicly available Windows post‑exploitation tool that harvests browser-stored credentials (passwords, cookies, OAuth refresh tokens, credit cards, autofill and history) from major Chromium-based browsers and Firefox by spawning a headless Chromium process and injecting a DLL to bypass App‑Bound Encryption (IElevator COM) or retrieving DPAPI/NSS keys; it includes operational evasion features and outputs structured JSON for red-team use, posing a significant risk for cloud account takeover and lateral movement if abused.