Hacking Tools, Hacker News & Cyber Security

DumpBrowserSecrets is a post‑exploitation credential‑harvesting tool that extracts saved credentials, session cookies, OAuth tokens, credit card data, autofill entries, and browsing history from major browsers (Chrome/Edge/Brave via App‑Bound Encryption bypass, Opera/Vivaldi via DPAPI, and Firefox via NSS). It uses a compiled executable and an injected DLL (Early Bird APC + IElevator COM interface) to decrypt protected keys, outputs structured JSON, and includes multiple evasion features—making it a high‑value tool for red teams and a realistic threat for credential theft and cloud account takeover on compromised developer endpoints.