Hacking Tools, Hacker News & Cyber Security

DumpBrowserSecrets is a precompiled Windows post-exploitation tool that harvests browser-stored secrets (saved logins, session cookies, OAuth refresh tokens, credit cards, autofill data and history) from Chrome, Edge, Brave, Opera, Opera GX, Vivaldi and Firefox. It bypasses Chrome's App‑Bound Encryption by spawning a headless Chromium process and injecting a DLL to call the IElevator COM interface to decrypt the app_bound_encrypted_key, handles DPAPI and NSS for other browsers, outputs structured JSON, and includes multiple evasion measures (string obfuscation, API hashing, PPID/argument spoofing, file-handle duplication, and a custom SQLite parser), making it a capable red-team tool that could be abused for account takeover and lateral movement.