Hacking Tools, Hacker News & Cyber Security

DumpBrowserSecrets is a post‑exploitation browser credential extraction tool that targets Chromium- and Gecko-based browsers to recover saved passwords, session cookies, OAuth refresh tokens, credit cards, autofill entries, and browsing history. It bypasses Chrome's App‑Bound Encryption by injecting a DLL into a headless Chromium process and using the IElevator COM interface, supports DPAPI and NSS decryption for other browsers, and includes several evasion features—making it a high-risk tool for lateral movement and cloud account takeover on compromised developer workstations.