Hacking Tools, Hacker News & Cyber Security

**DumpBrowserSecrets** is a post‑exploitation credential‑harvesting tool that extracts saved passwords, cookies, OAuth refresh tokens, credit card numbers, autofill data and browsing history from major Windows browsers by bypassing App‑Bound Encryption (via headless Chromium + DLL injection and the IElevator COM interface), DPAPI, and NSS protections, and includes evasion features to reduce detection; it outputs structured JSON for use in lateral movement, session replay, and cloud account takeover.