Hacking Tools, Hacker News & Cyber Security

DumpBrowserSecrets is a post-exploitation credential-harvesting tool (Windows executable + DLL) that extracts saved credentials, session cookies, OAuth refresh tokens, credit card data, autofill and browsing history from major Chromium- and Gecko-based browsers by using DLL injection into a headless Chromium process to leverage the IElevator COM interface (bypassing App-Bound Encryption), DPAPI extraction for some browsers, and NSS handling for Firefox; it includes operational evasion techniques and outputs structured JSON for red-team use or potential abuse.