Hacking Tools, Hacker News & Cyber Security

DumpBrowserSecrets is a publicly available post-exploitation credential-harvester targeted at Windows developer endpoints and enterprise workstations. It supports Chromium-based (Chrome, Edge, Brave) and Gecko-based (Firefox) browsers and uses a headless Chromium process plus Early Bird APC DLL injection and the IElevator COM interface to bypass App-Bound Encryption, plus DPAPI/NSS handling for other browsers. The tool extracts cookies, saved logins, OAuth refresh tokens, credit cards, autofill data and history into structured JSON, includes multiple EDR-evasion primitives (string obfuscation, API hashing, PPID/argument spoofing, handle duplication), and is presented as a red-team tool for assessing credential exposure and detection efficacy.