Hacking Tools, Hacker News & Cyber Security

**DumpBrowserSecrets** is a post‑exploitation credential‑harvesting tool that extracts saved passwords, session cookies, OAuth refresh tokens, credit card data, autofill entries, and browsing history from major browsers on Windows by bypassing App‑Bound Encryption for Chromium browsers (via IElevator COM interface and DLL injection) and using DPAPI/NSS techniques for others; the report covers implementation details, supported browsers, evasion features, attack scenarios, detection opportunities, and mitigation recommendations.