Hacking Tools, Hacker News & Cyber Security

DumpBrowserSecrets is a post‑exploitation credential‑harvesting tool that extracts saved credentials, session cookies, OAuth tokens, and other browser-stored secrets from major Chromium-based and Firefox browsers on Windows. It implements an App‑Bound Encryption bypass for Chrome/Edge/Brave by spawning a headless Chromium process and injecting a DLL to use the IElevator COM interface, supports DPAPI and NSS decryption for other browsers, includes multiple evasion techniques, and outputs structured JSON for rapid credential reuse—posing a high risk for lateral movement and cloud account takeover if used on breached developer endpoints.