Hacking Tools, Hacker News & Cyber Security

DumpBrowserSecrets is a Windows post-exploitation tool that extracts saved credentials, session cookies, OAuth tokens, credit-card and autofill data from major browsers (Chrome/Edge/Brave via App-Bound Encryption bypass, Opera/Vivaldi via DPAPI, and Firefox via NSS). It accomplishes this by spawning headless browser processes and injecting a DLL to use the IElevator COM interface to decrypt keys, includes multiple operational evasion features, outputs structured JSON for operators, and is relevant both to red teams and malicious actors seeking rapid account takeover and lateral movement.