Hacking Tools, Hacker News & Cyber Security

DumpBrowserSecrets is a publicly available post‑exploitation tool that harvests browser‑stored credentials (saved logins, cookies, OAuth tokens, credit cards, autofill, history, bookmarks) from major Windows browsers. It bypasses Chrome’s App‑Bound Encryption by injecting a DLL into a spawned headless Chromium process to use the IElevator COM interface, handles DPAPI and NSS decryption for other browsers, includes multiple evasive features (string obfuscation, API hashing, PPID/argument spoofing, file handle duplication), and outputs structured JSON for red‑team use, enabling rapid lateral movement and cloud account takeover from compromised developer endpoints.