Hacking Tools, Hacker News & Cyber Security

DumpBrowserSecrets is a public post‑exploitation tool that harvests browser‑stored credentials and session tokens from major Chromium‑based and Firefox browsers by bypassing App‑Bound Encryption (via injected DLL and the IElevator COM interface), DPAPI, and NSS protections; it outputs structured JSON and includes multiple operational evasion features, making it useful for red teams and potentially dangerous if abused by adversaries. The report covers supported browsers, extraction capabilities (saved logins, cookies, OAuth tokens, credit cards, autofill, history), attack scenarios, build/usage instructions, and detection/mitigation recommendations.