Hacking Tools, Hacker News & Cyber Security

DumpBrowserSecrets is a publicly released post-exploitation tool that harvests browser-stored secrets (saved passwords, session cookies, OAuth refresh tokens, credit card data, autofill and history) from Chromium-based and Firefox browsers on Windows by using DLL injection into a headless Chromium process to bypass App-Bound Encryption (via the IElevator COM interface) and by handling DPAPI and NSS encryption for other browsers; it includes multiple operational evasion techniques, writes structured JSON output, and the report provides detection and mitigation recommendations for enterprise defenders.