Hacking Tools, Hacker News & Cyber Security

**DumpBrowserSecrets** is a publicly available post‑exploitation tool that extracts saved passwords, session cookies, OAuth refresh tokens, credit card data and browsing history from Chromium‑based and Gecko browsers on Windows by using DLL injection and an IElevator COM bypass for App‑Bound Encryption (Chrome 127+), with DPAPI and NSS handling for other browsers; the report details capabilities, evasion features, an attack scenario, detection opportunities, and mitigation advice for red‑team and defensive use.