Hacking Tools, Hacker News & Cyber Security

DumpBrowserSecrets is a post‑exploitation credential‑harvesting tool that extracts a wide range of browser‑stored secrets (saved credentials, session cookies, OAuth refresh tokens, credit cards, autofill and history) from Chromium‑based and Gecko‑based browsers. The tool implements an App‑Bound Encryption bypass for Chrome/Edge/Brave by injecting a DLL into a headless Chromium process to call the IElevator COM interface, handles DPAPI for some browsers and NSS for Firefox, and includes operational evasion features; the report covers usage, extraction output, detection opportunities and mitigations.