Hacking Tools, Hacker News & Cyber Security

DumpBrowserSecrets is a post-exploitation credential-harvesting tool that extracts passwords, session cookies, OAuth refresh tokens, credit card data, autofill entries and browsing history from major Windows browsers. It supports Chromium-based browsers (Chrome, Edge, Brave) via an App-Bound Encryption bypass using a headless process, DLL injection and the IElevator COM interface, DPAPI retrieval for Opera-family browsers, and NSS decryption for Firefox; the report also covers operational evasion techniques, detection opportunities, installation/usage, and red-team relevance.