Hacking Tools, Hacker News & Cyber Security

DumpBrowserSecrets is a post‑exploitation credential‑harvesting tool that extracts saved passwords, cookies, OAuth tokens, credit card data, autofill entries, and history from major Chromium-based and Firefox browsers. It implements an App‑Bound Encryption bypass for Chrome/Brave/Edge by spawning a headless Chromium process, injecting a DLL via Early Bird APC to call the IElevator COM interface and decrypt browser keys, and uses DPAPI or NSS methods for other browsers; the tool includes multiple evasion techniques and outputs structured JSON for red‑team use while enabling rapid account takeover and lateral movement.