Hacking Tools, Hacker News & Cyber Security

DumpBrowserSecrets is a post-exploitation credential-harvesting tool that extracts saved passwords, session cookies, OAuth refresh tokens, credit card data, autofill entries, and browsing history from major browsers (Chrome, Edge, Brave, Opera variants, Vivaldi, and Firefox). It implements an App-Bound Encryption bypass for Chromium-based browsers by injecting a DLL into a headless Chromium process to use the IElevator COM interface, includes DPAPI and NSS handling for other browsers, and contains operational evasion features; the report also describes detection opportunities and mitigations.