Hacking Tools, Hacker News & Cyber Security

DumpBrowserSecrets is a publicly documented post-exploitation tool that extracts browser-stored credentials (saved logins, cookies, OAuth refresh tokens, credit cards, autofill and history) from Chrome, Edge, Brave, Opera variants, Vivaldi and Firefox; it uses DLL injection into a headless Chromium process to leverage the IElevator COM interface and bypass Chrome's App-Bound Encryption, includes DPAPI and NSS handling for other browsers, and describes operational evasion, attack scenarios, detection opportunities and mitigations for red team and security testing purposes.