Hacking Tools, Hacker News & Cyber Security

DumpBrowserSecrets is a publicly documented post-exploitation tool that harvests browser-stored credentials (saved passwords, session cookies, OAuth refresh tokens, credit cards, autofill and history) from Chrome, Edge, Brave, Opera-family browsers and Firefox. It implements an App‑Bound Encryption bypass for Chromium browsers by spawning a headless process and injecting a DLL to call the IElevator COM interface, and uses DPAPI or NSS decryption where applicable; the tool includes evasion features (string obfuscation, API hashing, PPID/argument spoofing, handle duplication, custom SQLite parser) and writes structured JSON output, making it useful for red teams and a high-risk capability if used by attackers.