Hacking Tools, Hacker News & Cyber Security

DumpBrowserSecrets is a Windows post‑exploitation tool that extracts browser‑stored credentials and session data (saved passwords, cookies, OAuth refresh tokens, credit cards, autofill, history) from Chromium‑based browsers and Firefox; it bypasses Chrome's App‑Bound Encryption by injecting a DLL into a headless Chromium process and using the IElevator COM interface, and handles DPAPI and NSS decryption for other browsers. The report describes technical implementation, operational evasion features, output formats, an attacker use case, and detection/mitigation guidance, and frames the tool as a red‑team utility for assessing the risk posed by browser‑stored secrets.