Hacking Tools, Hacker News & Cyber Security

**DumpBrowserSecrets** is a post‑exploitation credential‑harvesting tool that extracts passwords, session cookies, OAuth refresh tokens, credit card data, autofill entries, and browsing history from Chromium‑based and Firefox browsers on Windows by using headless Chromium process injection and IElevator COM to bypass App‑Bound Encryption (and DPAPI/NSS for other browsers); the report covers implementation details, evasion techniques, attack scenarios, and detection/mitigation recommendations.