Hacking Tools, Hacker News & Cyber Security

DumpBrowserSecrets is a post‑exploitation credential‑harvesting tool (publicly available on GitHub) that extracts saved passwords, session cookies, OAuth refresh tokens, credit card data and browser history from major Chromium and Gecko browsers on Windows. It implements an App‑Bound Encryption bypass for Chrome/Edge/Brave by spawning a headless Chromium process and injecting a DLL via Early Bird APC to call the IElevator COM interface, handles DPAPI for Opera/Vivaldi, and NSS for Firefox; includes operational evasion techniques and outputs structured JSON suitable for red‑team or adversary use.