Hacking Tools, Hacker News & Cyber Security

DumpBrowserSecrets is a post‑exploitation credential-harvesting tool that extracts saved credentials, session cookies, OAuth refresh tokens, credit card data, autofill entries, history and bookmarks from major browsers. It supports Chromium-based browsers (Chrome, Edge, Brave) by bypassing App‑Bound Encryption via spawning a headless Chromium process and DLL injection using Early Bird APC to access the IElevator COM interface, as well as DPAPI-based browsers (Opera, Vivaldi) and NSS‑based Firefox; the tool includes operational evasion features, outputs structured JSON, and the report covers usage, attack scenarios, detection opportunities and mitigations.