Hacking Tools, Hacker News & Cyber Security

DumpBrowserSecrets is a publicly available post-exploitation tool that harvests browser-stored secrets (cookies, saved logins, OAuth refresh tokens, credit cards, autofill data, history, and bookmarks) from major Chromium-based and Firefox browsers on Windows. It implements an App-Bound Encryption bypass for Chrome/Brave/Edge by spawning a headless Chromium process and injecting a DLL that uses the IElevator COM interface to decrypt keys, handles DPAPI and NSS decryption for other browsers, includes multiple evasion techniques (string obfuscation, API hashing, PPID/argument spoofing, Early Bird APC injection, file handle duplication), and outputs structured JSON for red-team use—making it a high-risk tool for credential theft and cloud account takeover from compromised developer endpoints.