Hacking Tools, Hacker News & Cyber Security

DumpBrowserSecrets is a publicly documented post‑exploitation tool that extracts saved credentials, cookies, OAuth refresh tokens, credit card data, autofill entries, and browsing history from major Windows browsers by using a headless Chromium process and DLL injection to bypass App‑Bound Encryption (Chrome/Brave/Edge) and by handling DPAPI and NSS decryption for other browsers; the report details capabilities, evasion techniques, attack scenarios, detection opportunities, and mitigations for enterprise defenders.