Hacking Tools, Hacker News & Cyber Security

DumpBrowserSecrets is a post‑exploitation credential‑harvesting tool that targets Chromium- and Gecko-based browsers to extract saved passwords, session cookies, OAuth refresh tokens, credit cards, autofill data, and history. It implements an App‑Bound Encryption bypass for Chrome/Edge/Brave by spawning a headless Chromium process and injecting a DLL to use the IElevator COM interface to decrypt keys, and uses DPAPI/NSS methods for other browsers; the report covers usage, evasion features, attack scenarios, detection opportunities, and mitigations.