Hacking Tools, Hacker News & Cyber Security

DumpBrowserSecrets is a publicly available post‑exploitation tool that extracts browser‑stored secrets (saved logins, session cookies, OAuth refresh tokens, credit card data, autofill entries, history, and bookmarks) from Chromium‑based browsers and Firefox on Windows by using DLL injection into a headless Chromium process to bypass App‑Bound Encryption, retrieving DPAPI or NSS keys as needed; it includes multiple operational evasion features, outputs structured JSON for credential reuse and session replay, and is intended for red‑team/assumed‑breach testing but represents a high‑risk capability for cloud account takeover and lateral movement if abused.