Hacking Tools, Hacker News & Cyber Security

DumpBrowserSecrets is a Windows post‑exploitation tool that harvests credentials, session cookies, OAuth refresh tokens, credit card numbers and other browser-stored secrets from major Chromium-based and Firefox browsers. It bypasses Chrome's App‑Bound Encryption (Chrome 127+) by spawning a headless Chromium process and injecting a DLL via Early Bird APC to use the IElevator COM interface to decrypt encryption keys, supports DPAPI and NSS decryption for other browsers, includes multiple evasion techniques, and outputs structured JSON for use in lateral movement and cloud account takeover scenarios.