Hacking Tools, Hacker News & Cyber Security

DumpBrowserSecrets is a Windows post-exploitation tool that harvests saved passwords, session cookies, OAuth refresh tokens, credit card data, autofill entries and browsing history from major browsers by bypassing Chrome's App‑Bound Encryption (via DLL injection into a headless Chromium process and use of the IElevator COM interface) and by extracting DPAPI or NSS-protected secrets from other browsers; the report covers usage, evasion techniques, an attack scenario, detection opportunities, and mitigation recommendations.