Hacking Tools, Hacker News & Cyber Security

**DumpBrowserSecrets** is a post-exploitation credential-harvesting tool that extracts saved passwords, session cookies, OAuth refresh tokens, credit card data, autofill entries and browsing history from major Chromium- and Gecko-based browsers; it implements an App-Bound Encryption bypass for Chrome/Edge/Brave via DLL injection into a headless Chromium process and supports DPAPI and NSS decryption for other browsers. The report covers the tool's components, supported browsers, evasion features (string obfuscation, API hashing, PPID/argument spoofing, Early Bird APC injection), typical attack scenarios, output format, and detection and mitigation guidance for defenders.