Hacking Tools, Hacker News & Cyber Security

DumpBrowserSecrets is a post‑exploitation credential‑harvesting tool for Windows that extracts saved credentials, session cookies, OAuth refresh tokens, credit card data and browsing history from major Chromium‑ and Gecko‑based browsers by using DLL injection into a headless Chromium process to bypass App‑Bound Encryption (IElevator COM), retrieving DPAPI keys where applicable, and using NSS decryption for Firefox; the report documents its implementation, usage, evasion techniques, attack scenarios, detection opportunities, and mitigations, and frames the tool as a red‑team capability with real risk to enterprise SaaS sessions and developer workstations.