Hacking Tools, Hacker News & Cyber Security

DumpBrowserSecrets is a post‑exploitation credential‑harvesting tool (publicly released) that extracts saved passwords, session cookies, OAuth refresh tokens, autofill data, credit card details and history from major browsers. It bypasses Chrome's App‑Bound Encryption by spawning a headless Chromium process and injecting a DLL to call the IElevator COM interface, uses DPAPI/NSS for other browsers, includes operational evasion features, outputs structured JSON, and is intended for red team testing but represents a high‑risk capability for real-world credential theft and cloud account takeover.