Hacking Tools, Hacker News & Cyber Security

DumpBrowserSecrets is a publicly available post‑exploitation tool for Windows that harvests browser‑stored secrets (cookies, saved logins, OAuth tokens, credit cards, autofill, history, bookmarks) across major Chromium‑based browsers and Firefox. It implements an App‑Bound Encryption bypass for Chrome/Edge/Brave by spawning a headless Chromium process and injecting a DLL (Early Bird APC) to call the IElevator COM interface, uses DPAPI/NSS approaches for other browsers, includes operational evasion techniques, outputs structured JSON, and is presented for red‑team/assumed‑breach testing while posing a clear risk of cloud account takeover and lateral movement if misused.