Hacking Tools, Hacker News & Cyber Security

DumpBrowserSecrets is a publicly released post-exploitation tool that harvests browser-stored secrets (saved credentials, session cookies, OAuth refresh tokens, credit cards, autofill data, and browsing history) across Chromium-based and Firefox browsers. It implements a DLL injection + IElevator COM bypass to decrypt App-Bound Encryption keys in modern Chromium builds, retrieves DPAPI or NSS-protected keys where applicable, includes multiple operational evasion techniques, and outputs structured JSON to support credential replay and lateral access testing; the report covers usage, detection signals, and mitigation advice.