Hacking Tools, Hacker News & Cyber Security

DumpBrowserSecrets is a post‑exploitation credential‑harvesting tool that extracts saved passwords, session cookies, OAuth refresh tokens, credit card data, autofill entries, and browsing history from major Chromium‑based browsers and Firefox. The report details the tool's architecture (an executable plus a DLL), its App‑Bound Encryption bypass for Chrome/Edge/Brave via IElevator COM calls performed inside an injected headless Chromium process, DPAPI and NSS handling for other browsers, operational evasion features, an attacker usage scenario, and recommended detection and mitigation approaches.