Hacking Tools, Hacker News & Cyber Security

DumpBrowserSecrets is a Windows post-exploitation tool that harvests browser-stored credentials and session artifacts from major Chromium- and Gecko-based browsers. It bypasses Chrome's App-Bound Encryption by launching a headless Chromium process and injecting a DLL to call the IElevator COM interface, uses DPAPI/NSS methods for other browsers, and includes operational evasion features; output is structured JSON containing cookies, OAuth tokens, saved logins, autofill data, and more, enabling rapid lateral movement and cloud account takeover if used on compromised developer endpoints.