Hacking Tools, Hacker News & Cyber Security

DumpBrowserSecrets is a precompiled Windows post-exploitation tool that harvests browser-stored secrets (saved logins, session cookies, OAuth refresh tokens, credit card data, autofill and history) from Chromium-based browsers and Firefox. The report documents its DLL-injection approach to bypass Chrome's App-Bound Encryption via the IElevator COM interface, DPAPI and NSS handling for other browsers, operational evasion techniques, detection opportunities, and mitigation recommendations for defenders.