Hacking Tools, Hacker News & Cyber Security

DumpBrowserSecrets is a publicly released post‑exploitation tool that harvests browser‑stored secrets from Chromium‑ and Gecko‑based browsers on Windows by bypassing App‑Bound Encryption (via IElevator COM invocation inside an injected DLL) and using DPAPI/NSS decryption where applicable; it extracts passwords, session cookies, OAuth refresh tokens, credit card data, autofill entries and history, and is designed with evasion features for red‑team use but could be abused by attackers to achieve rapid lateral movement and cloud account takeover.