Hacking Tools, Hacker News & Cyber Security

DumpBrowserSecrets is a publicly available post‑exploitation tool that harvests browser‑stored credentials (saved logins, session cookies, OAuth refresh tokens, credit cards, autofill and history) from major browsers by using DLL injection and an IElevator COM bypass to decrypt App‑Bound Encryption keys for Chromium-based browsers, plus DPAPI/NSS handling for others; the report outlines capabilities, evasion techniques, usage examples, detection opportunities, and mitigation recommendations.