Hacking Tools, Hacker News & Cyber Security

DumpBrowserSecrets is a publicly documented post‑exploitation tool that harvests browser‑stored credentials (cookies, saved logins, OAuth tokens, credit cards, autofill, history, bookmarks) from major Chromium‑based and Firefox browsers on Windows. It bypasses Chrome's App‑Bound Encryption by spawning a headless Chromium process and injecting a DLL to call the IElevator COM interface, retrieves DPAPI or NSS keys for other browsers, and includes evasion features (string obfuscation, API hashing, PPID/argument spoofing, handle duplication, custom SQLite parsing). The tool is positioned for red‑team assumed‑breach use but demonstrates a high‑impact credential theft capability relevant to enterprise developer and SaaS account compromise.