Hacking Tools, Hacker News & Cyber Security

DumpBrowserSecrets is a Windows post-exploitation tool that harvests browser-stored secrets (saved logins, cookies, OAuth refresh tokens, credit cards, autofill entries, history and bookmarks) across Chromium-based browsers and Firefox. It implements an App-Bound Encryption bypass for modern Chrome/Edge/Brave by spawning a headless Chromium process and injecting a DLL to call the IElevator COM interface, handles DPAPI for Opera/Vivaldi, and uses NSS decryption for Firefox; the report also describes operational evasion features, usage examples, detection opportunities, and mitigation guidance.