Hacking Tools, Hacker News & Cyber Security

DumpBrowserSecrets is a Windows post-exploitation tool that harvests browser-stored credentials (saved logins, session cookies, OAuth refresh tokens, credit cards, autofill, history and bookmarks) across Chromium-based and Firefox browsers by bypassing App-Bound Encryption (via DLL injection into a headless Chromium process and the IElevator COM interface), DPAPI, and NSS protections; the report covers usage, extracted output, evasion features, an attack scenario, and detection/mitigation recommendations.