Hacking Tools, Hacker News & Cyber Security

DumpBrowserSecrets is a publicly documented post‑exploitation tool that harvests browser-stored credentials and session data (saved passwords, cookies, OAuth refresh tokens, credit card info, autofill, history, and bookmarks) across major Chromium- and Gecko-based browsers. It implements an App‑Bound Encryption bypass for Chrome/Brave/Edge by injecting a DLL into a headless Chromium process to use the IElevator COM interface, handles DPAPI for Opera-family browsers, and uses NSS decryption for Firefox; the report covers implementation details, operational evasion techniques, usage examples, detection opportunities, and mitigation recommendations.