Hacking Tools, Hacker News & Cyber Security

**DumpBrowserSecrets** is a post‑exploitation credential‑harvesting tool that extracts saved passwords, session cookies, OAuth refresh tokens, credit card data, autofill entries and history from major Windows browsers by bypassing App‑Bound Encryption (via DLL injection and the IElevator COM interface) and using DPAPI/NSS methods for other browsers; the report covers its architecture, evasion features, usage scenarios, detection opportunities, and mitigation advice.