Hacking Tools, Hacker News & Cyber Security

DumpBrowserSecrets is a publicly available post-exploitation tool that extracts saved credentials, session cookies, OAuth refresh tokens, autofill data, credit card details, and browsing history from major browsers on Windows by using DLL injection into headless Chromium to bypass App‑Bound Encryption (via the IElevator COM interface), DPAPI extraction for other Chromium forks, and NSS handling for Firefox; it includes operational evasion features and outputs structured JSON for red‑team use or testing detection controls.