Hacking Tools, Hacker News & Cyber Security

DumpBrowserSecrets is a publicly available post-exploitation credential-harvesting tool that extracts passwords, session cookies, OAuth refresh tokens, credit card data and browsing artifacts from major Chromium-based and Firefox browsers. It bypasses Chrome's App-Bound Encryption by spawning a headless Chromium process and injecting a DLL to use the IElevator COM interface, supports DPAPI and NSS decryption for other browsers, includes operational evasion features, outputs structured JSON, and is positioned for red-team/assumed-breach testing while representing a realistic credential-theft threat to enterprise environments.