Hacking Tools, Hacker News & Cyber Security

DumpBrowserSecrets is a precompiled Windows post‑exploitation tool that harvests saved passwords, session cookies, OAuth refresh tokens, credit card data, autofill entries, and browsing history from major browsers (Chrome/Edge/Brave with App‑Bound Encryption bypass, Opera/Opera GX/Vivaldi via DPAPI, and Firefox via NSS decryption). It operates by spawning a headless Chromium process and injecting a DLL to use the IElevator COM interface to decrypt app_bound_encrypted_key for Chromium variants, includes multiple evasion techniques, outputs structured JSON, and is positioned for red‑team assumed‑breach testing while also representing a significant credential theft risk if misused.