Hacking Tools, Hacker News & Cyber Security

DumpBrowserSecrets is a post-exploitation credential-harvesting tool that targets major Windows browsers (Chromium-based and Firefox) to extract saved passwords, cookies, OAuth refresh tokens, credit card data, autofill entries, and history. It bypasses Chrome's App-Bound Encryption (Chrome 127+) by spawning a headless Chromium process and injecting a DLL to call the IElevator COM interface, and uses DPAPI/NSS approaches for other browsers; the tool includes operational evasion features and outputs structured JSON for red-team or adversary use, presenting a high-risk vector for cloud account takeover and lateral movement from compromised developer endpoints.