Hacking Tools, Hacker News & Cyber Security

DumpBrowserSecrets is a publicly available post-exploitation tool that harvests browser-stored secrets (passwords, session cookies, OAuth tokens, credit cards, autofill data, history, and bookmarks) from major Windows browsers by handling App-Bound Encryption (via DLL injection into a headless Chromium process and the IElevator COM interface), DPAPI, and Firefox NSS storage; it includes operational evasion features, outputs structured JSON for red-team use, and the report covers usage, an attack scenario, detection signals, and mitigation guidance.