Hacking Tools, Hacker News & Cyber Security

DumpBrowserSecrets is a post-exploitation credential-harvesting tool that extracts passwords, cookies, OAuth refresh tokens, credit card data and browsing history from Chrome, Edge, Brave, Opera family browsers and Firefox. It implements an App-Bound Encryption bypass for Chromium-based browsers by injecting a DLL into a headless browser process to call the IElevator COM interface, includes DPAPI and NSS handling, and contains multiple evasion techniques aimed at surviving EDR, making it a powerful tool for lateral movement and cloud account takeover in assumed-breach scenarios.