Hacking Tools, Hacker News & Cyber Security

DumpBrowserSecrets is a publicly available post‑exploitation tool that harvests browser‑stored secrets (cookies, saved credentials, OAuth refresh tokens, credit cards, autofill and browsing history) from Chrome, Edge, Brave, Opera variants, Vivaldi and Firefox on Windows by bypassing App‑Bound Encryption, DPAPI and NSS protections; it uses DLL injection into a headless Chromium process (Early Bird APC + IElevator COM) to decrypt protected keys, includes multiple EDR‑evasion techniques, and outputs structured JSON for red‑team use. The report covers functionality, supported browsers, attack scenarios, detection opportunities, and mitigation recommendations.