Hacking Tools, Hacker News & Cyber Security

DumpBrowserSecrets is a publicly available Windows post‑exploitation tool that harvests browser‑stored secrets (saved logins, session cookies, OAuth refresh tokens, credit cards, autofill and history) from Chromium‑based browsers and Firefox; it includes an App‑Bound Encryption bypass for Chrome 127+ by injecting a DLL into a headless browser process to access the IElevator COM interface. The report describes the tool's architecture, extraction and decryption methods, evasion features, an example attack scenario, and recommended detection and mitigation strategies.