Hacking Tools, Hacker News & Cyber Security

DumpBrowserSecrets is a publicly released post‑exploitation tool that harvests browser-stored secrets (saved passwords, session cookies, OAuth refresh tokens, credit cards, autofill data, and history) from Chromium-based browsers (Chrome, Edge, Brave, Opera family, Vivaldi) and Firefox. It implements an App‑Bound Encryption bypass for Chrome 127+ by spawning a headless Chromium process and using DLL injection with the IElevator COM interface, includes DPAPI and NSS handling for other browsers, and contains multiple operational evasion features; output is structured JSON for red‑team use or potential abuse.