Hacking Tools, Hacker News & Cyber Security

DumpBrowserSecrets is a publicly documented post-exploitation tool that extracts saved passwords, session cookies, OAuth refresh tokens, credit card data, autofill entries and browsing history from Chrome, Edge, Brave, Opera variants, Vivaldi and Firefox on Windows. It bypasses Chrome's App-Bound Encryption by spawning a headless Chromium process and injecting a DLL to use the IElevator COM interface, supports DPAPI/NSS decryption for other browsers, includes operational evasion techniques, and outputs structured JSON suitable for red team use — making it a high-risk capability for lateral movement and cloud account takeover if used by adversaries.