Hacking Tools, Hacker News & Cyber Security

DumpBrowserSecrets is a post‑exploitation credential‑harvesting tool that extracts saved passwords, session cookies, OAuth refresh tokens, credit card data and browsing histories from Chromium-based browsers (Chrome, Edge, Brave, Opera variants, Vivaldi) and Firefox by bypassing App‑Bound Encryption (via IElevator COM invocation inside a headless injected Chromium process), DPAPI, and NSS protections; it includes operational evasion measures, outputs structured JSON, and is intended for red-team assumed‑breach testing but presents a significant real-world credential compromise risk if misused.