Hacking Tools, Hacker News & Cyber Security

DumpBrowserSecrets is a post‑exploitation credential‑harvesting tool that targets major Windows browsers (Chromium-based and Firefox) to extract passwords, cookies, OAuth tokens, credit card data, and browsing history. It bypasses Chrome's App‑Bound Encryption by spawning a headless Chromium process and injecting a DLL to use the IElevator COM interface, uses DPAPI/NSS approaches for other browsers, includes multiple operational evasion techniques, outputs structured JSON, and is positioned for red‑team/assumed‑breach testing while also representing a high-risk capability if abused by adversaries.