Hacking Tools, Hacker News & Cyber Security

DumpBrowserSecrets is a post‑exploitation credential‑harvesting tool (from Maldev Academy) that extracts saved passwords, session cookies, OAuth refresh tokens, credit card data, autofill entries and browsing history from major Chromium‑based browsers and Firefox. It implements an App‑Bound Encryption bypass for Chrome/Brave/Edge by spawning a headless Chromium process and injecting a DLL to use the IElevator COM interface, includes DPAPI/NSS handling for other browsers, and contains multiple operational evasion features; the report covers usage, attack scenarios, detection opportunities, and mitigations.