Hacking Tools, Hacker News & Cyber Security

DumpBrowserSecrets is a precompiled Windows post‑exploitation tool that harvests browser‑stored secrets (saved credentials, session cookies, OAuth refresh tokens, credit cards, autofill, history, bookmarks) from major Chromium‑based browsers and Firefox. It circumvents Chrome's App‑Bound Encryption by spawning a headless Chromium and injecting a DLL to call the IElevator COM interface, supports DPAPI and NSS decryption for other browsers, includes multiple operational evasion techniques (string obfuscation, API hashing, PPID/argument spoofing, Early Bird APC injection), and outputs structured JSON for red teams or adversaries—making it a high‑impact capability for credential theft and endpoint testing.