Hacking Tools, Hacker News & Cyber Security

DumpBrowserSecrets is a publicly available post-exploitation tool that harvests browser-stored credentials and session tokens from major Chromium- and Gecko-based browsers. It uses DLL injection into a headless Chromium process and the IElevator COM interface to bypass Chrome App-Bound Encryption (and DPAPI/NSS where applicable), extracts cookies, saved logins, OAuth refresh tokens, credit card data, autofill entries and history, and includes operational evasion features tailored for red-team or adversary use; the report covers usage, attack scenarios, detection points, and mitigations.