Hacking Tools, Hacker News & Cyber Security

DumpBrowserSecrets is a publicly documented post-exploitation tool designed to extract browser-stored secrets (passwords, cookies, OAuth refresh tokens, credit cards, autofill and history) from Chromium-based and Firefox browsers on Windows by bypassing App-Bound Encryption (via injected DLL and the IElevator COM interface), DPAPI, and NSS protections; the report describes usage, evasion features, an attack scenario targeting developer workstations, detection opportunities, and mitigations.