Hacking Tools, Hacker News & Cyber Security

DumpBrowserSecrets is a publicly documented post‑exploitation credential‑harvesting tool that extracts saved passwords, cookies, OAuth refresh tokens, credit card and autofill data, and browsing history from major Chromium-based and Firefox browsers. It implements an App‑Bound Encryption bypass for Chrome/Edge/Brave by injecting a DLL into a headless Chromium process to use the IElevator COM interface, supports DPAPI and NSS decryption for other browsers, includes operational evasion features, outputs structured JSON, and is intended for red team/assumed‑breach testing but poses high utility to adversaries for rapid cloud account takeover and lateral movement.