Hacking Tools, Hacker News & Cyber Security

DumpBrowserSecrets is a publicly available post‑exploitation tool that harvests browser-stored secrets (saved passwords, session cookies, OAuth refresh tokens, credit card numbers, autofill data, and browsing history) from Chromium-based browsers and Firefox by bypassing App‑Bound Encryption through DLL injection into a headless Chromium process and using DPAPI/NSS decryption where applicable; the report documents its architecture, operational evasion features, usage examples, detection opportunities, and mitigation recommendations.