Hacking Tools, Hacker News & Cyber Security

DumpBrowserSecrets is a publicly documented post-exploitation credential-harvesting tool that extracts passwords, session cookies, OAuth refresh tokens, credit card data, autofill entries, history, and bookmarks from Chrome, Edge, Brave (App-Bound Encryption), Opera/Opera GX/Vivaldi (DPAPI), and Firefox (NSS). It bypasses Chrome's App-Bound Encryption by spawning a headless Chromium process and injecting a DLL to call the IElevator COM interface, includes evasion features (string obfuscation, API hashing, PPID/argument spoofing, handle duplication), outputs structured JSON, and is intended for red-team/assumed-breach testing though it can be misused by attackers to enable cloud account takeover and lateral movement.