Hacking Tools, Hacker News & Cyber Security

DumpBrowserSecrets is a publicly available post‑exploitation tool that harvests browser‑stored secrets (saved credentials, session cookies, OAuth refresh tokens, credit cards, autofill and history) from Chromium-based and Firefox browsers by bypassing App‑Bound Encryption via IElevator DLL injection and handling DPAPI/NSS protections; it outputs structured JSON and includes multiple evasion features for red‑team use. The report details supported browsers, extracted data types, build/use instructions, an example attack scenario, detection opportunities, and mitigation guidance.