Hacking Tools, Hacker News & Cyber Security

DumpBrowserSecrets is a Windows post-exploitation credential-harvesting tool that targets Chromium-based browsers (Chrome, Edge, Brave) and Firefox to extract saved passwords, session cookies, OAuth refresh tokens, credit card data, autofill entries and browsing history. The tool bypasses App-Bound Encryption (Chrome 127+) by spawning a headless Chromium process and injecting a DLL that uses the IElevator COM interface to decrypt keys, handles DPAPI and NSS decryption for other browsers, includes multiple evasion techniques for EDR, outputs structured JSON, and is intended for red-team/assumed-breach testing while demonstrating a high-risk credential exposure vector.