Hacking Tools, Hacker News & Cyber Security

DumpBrowserSecrets is a publicly documented post-exploitation tool that extracts browser-stored secrets (saved passwords, session cookies, OAuth refresh tokens, credit cards, autofill data, browsing history, and bookmarks) from Chrome, Edge, Brave, Opera family, Vivaldi, and Firefox. It implements an App‑Bound Encryption bypass for Chromium-based browsers by spawning a headless Chromium process and injecting a DLL to use the IElevator COM interface, includes DPAPI/NSS handling for other browsers, and incorporates operational evasion techniques; the report includes usage examples, detection opportunities, and mitigation recommendations.