Hacking Tools, Hacker News & Cyber Security

DumpBrowserSecrets is a post‑exploitation credential‑harvesting tool that extracts saved passwords, cookies, OAuth refresh tokens, credit card data, autofill entries, history, and bookmarks from Chrome, Edge, Brave, Opera family, Vivaldi, and Firefox. It implements an IElevator COM-based App‑Bound Encryption bypass for Chromium 127+ by injecting a DLL into a headless browser via Early Bird APC, retrieves decryption keys (or DPAPI/NSS keys where applicable), and writes structured JSON output; the tool includes multiple evasion techniques and is intended for assumed‑breach/red team use but demonstrates a high‑impact capability for account takeover and lateral movement.