Hacking Tools, Hacker News & Cyber Security

DumpBrowserSecrets is a post‑exploitation credential‑harvesting tool that extracts saved passwords, session cookies, OAuth refresh tokens, credit card data, autofill entries and history from Chromium‑based and Gecko browsers on Windows. It bypasses Chrome's App‑Bound Encryption (Chrome 127+) by spawning a headless Chromium process and injecting a DLL to use the IElevator COM interface to decrypt the app_bound_encrypted_key, retrieves DPAPI keys for some browsers and uses NSS decryption for Firefox; the tool includes multiple operational evasion features and outputs structured JSON for red‑team or adversary use, with detection guidance and mitigation recommendations.