Hacking Tools, Hacker News & Cyber Security

DumpBrowserSecrets is a post‑exploitation credential‑harvesting tool that targets major browsers (Chrome, Edge, Brave, Opera variants, Vivaldi, and Firefox) to extract saved passwords, session cookies, OAuth refresh tokens, credit card data, autofill entries, and browsing history. It implements an App‑Bound Encryption bypass for Chromium-based browsers by spawning a headless Chromium process and injecting a DLL to invoke the IElevator COM interface to decrypt keys, uses DPAPI/NSS handling for other browsers, and includes operational evasion features; the README covers usage examples, detection opportunities, and mitigation recommendations.