Hacking Tools, Hacker News & Cyber Security

DumpBrowserSecrets is a post-exploitation credential-harvesting tool that targets major browsers (Chrome, Edge, Brave, Opera variants, Vivaldi, and Firefox) to extract saved passwords, session cookies, OAuth refresh tokens, credit cards, autofill data, and browsing history. It bypasses Chrome's App-Bound Encryption by injecting a DLL into a headless Chromium process and using the IElevator COM interface to decrypt keys, employs DPAPI/NSS handling for other browsers, and includes operational evasion features; while distributed for red teams, it materially increases the blast radius of a compromised developer workstation by enabling rapid cloud and SaaS account takeover.