Hacking Tools, Hacker News & Cyber Security

DumpBrowserSecrets is a publicly released post-exploitation tool that harvests browser-stored secrets (cookies, saved logins, OAuth refresh tokens, credit cards, autofill data, history, bookmarks) from major Chromium-based browsers and Firefox. It implements an App-Bound Encryption bypass for Chrome/Edge/Brave via spawning a headless Chromium process and DLL injection using Early Bird APC to call the IElevator COM interface, retrieves DPAPI or NSS keys where applicable, includes operational evasion features (string obfuscation, API hashing, PPID/argument spoofing, handle duplication), outputs structured JSON, and is intended for red-team/assumed-breach testing while also representing a realistic adversary capability for credential theft and cloud account takeover.