Hacking Tools, Hacker News & Cyber Security

DumpBrowserSecrets is a Windows post-exploitation credential-harvesting tool (successor to DumpChromeSecrets) that extracts saved passwords, session cookies, OAuth refresh tokens, credit card data, autofill entries and history from Chromium-based and Gecko-based browsers; it bypasses Chrome's App-Bound Encryption by injecting a DLL into a headless Chromium process to use the IElevator COM interface, handles DPAPI and NSS models for other browsers, and includes multiple evasion techniques for operational use. The tool outputs structured JSON, supports all major desktop browsers, completes extraction rapidly, and is positioned for red-team assumed-breach exercises but poses a high-risk capability if abused by attackers.