Hacking Tools, Hacker News & Cyber Security

DumpBrowserSecrets is a publicly available Windows post‑exploitation tool that harvests browser-stored secrets (saved logins, session cookies, OAuth refresh tokens, credit cards, autofill data, history, and bookmarks) from Chromium-based browsers (Chrome, Edge, Brave, Opera variants, Vivaldi) and Firefox; it bypasses Chrome's App‑Bound Encryption by spawning a headless Chromium process and injecting a DLL that uses the IElevator COM interface via Early Bird APC injection, includes multiple operational evasion techniques, outputs structured JSON, and is positioned as a red-team readiness/testing utility with guidance on detection and mitigation.